]> git.ipfire.org Git - thirdparty/nftables.git/commit
evaluate: flag fwd and queue statements as terminal
authorFlorian Westphal <fw@strlen.de>
Fri, 6 Sep 2019 14:43:37 +0000 (16:43 +0200)
committerFlorian Westphal <fw@strlen.de>
Sat, 7 Sep 2019 12:29:31 +0000 (14:29 +0200)
commitcec665f34a91600550dbd14655b25ed2cc317233
treec5b47f3c719d862a5a1f18ddd27320b7d3d9f319
parent648cc618975ec27df2920cf2fa9841ba76cf21d0
evaluate: flag fwd and queue statements as terminal

Both queue and fwd statement end evaluation of a rule:

in
... fwd to "eth0" accept
... queue accept

"accept" is redundant and never evaluated in the kernel.
Add the missing "TERMINAL" flag so the evaluation step will catch
any trailing expressions:

nft add rule filter input queue counter
Error: Statement after terminal statement has no effect

Signed-off-by: Florian Westphal <fw@strlen.de>
Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/evaluate.c