DNAT: fix incorrect check during parsing

Specifying --random before --to-dest results in:

Multiple --to-destination not supported

Fix the flags check to only test the IPT_DNAT_OPT_DEST bit.

Signed-off-by: Patrick McHardy <kaber@trash.net>

diff --git a/extensions/libipt_DNAT.c b/extensions/libipt_DNAT.c
index 380294af2ff69cf38fd31f2dc54cff257e3867d1..57c5888b0254c6cb346665f4c40b5057dafd7b82 100644 (file)
--- a/extensions/libipt_DNAT.c
+++ b/extensions/libipt_DNAT.c
@@ -158,7 +158,7 @@ static int DNAT_parse(int c, char **argv, int invert, unsigned int *flags,
                        xtables_error(PARAMETER_PROBLEM,
                                   "Unexpected `!' after --to-destination");
 
-               if (*flags) {
+               if (*flags & IPT_DNAT_OPT_DEST) {
                        if (!kernel_version)
                                get_kernel_version();
                        if (kernel_version > LINUX_VERSION(2, 6, 10))