]> git.ipfire.org Git - thirdparty/nftables.git/commit
evaluate: postpone transport protocol match check after nat expression evaluation
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 2 Nov 2021 10:31:40 +0000 (11:31 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 3 Nov 2021 11:48:19 +0000 (12:48 +0100)
commit8f3048954d40da8240cf5ff07b84d5c2e66f9066
treeb2d6974ae9575575e2ea4450847b7c0abd03acb6
parentdd0e717827d8dff3b762a8ebbf15bf57aa4012cb
evaluate: postpone transport protocol match check after nat expression evaluation

Fix bogus error report when using transport protocol as map key.

Fixes: 50780456a01a ("evaluate: check for missing transport protocol match in nat map with concatenations")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/evaluate.c
tests/py/ip/dnat.t
tests/py/ip/dnat.t.payload.ip
tests/py/ip/snat.t.payload