]> git.ipfire.org Git - thirdparty/nftables.git/commit
evaluate: fix inet nat with no layer 3 info
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 20 Jul 2021 16:59:44 +0000 (18:59 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 20 Jul 2021 17:05:15 +0000 (19:05 +0200)
commit9a36033ce50638a403d1421935cdd1287ee5de6b
tree777e7e9ffaf195469eef850f353d6ca9315b704d
parent9edaa6a51eab49a378dd358e0b4254d0398c629f
evaluate: fix inet nat with no layer 3 info

nft currently reports:

 Error: Could not process rule: Protocol error
 add rule inet x y meta l4proto tcp dnat to :80
                                    ^^^^

default to NFPROTO_INET family, otherwise kernel bails out EPROTO when
trying to load the conntrack helper.

Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1428
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/evaluate.c