]> git.ipfire.org Git - thirdparty/nftables.git/commit
evaluate: reject: accept a reject reason with incorrect network context
authorAlvaro Neira <alvaroneay@gmail.com>
Wed, 22 Oct 2014 13:25:52 +0000 (15:25 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 24 Oct 2014 10:00:06 +0000 (12:00 +0200)
commit9554dd397309be84a96424d8087a5980638d7380
tree459dcc688a8458215bdc8a4d33a7ffa568566eb5
parent9c449cd67d37dc07b6d50613c2ed00081bc9c3f8
evaluate: reject: accept a reject reason with incorrect network context

nft add rule bridge test-bridge input ether type ip \
reject with icmpv6 type no-route

This rule pass the evaluation step but the network context is incompatible with
the reject reason. In that cases, we have to throw an error like "conflicting
protocols specified: ip vs ip6"

Signed-off-by: Alvaro Neira Ayuso <alvaroneay@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/evaluate.c