CONNMARK: print mark rules with mask 0xffffffff as set instead of xset

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>

diff --git a/extensions/libxt_CONNMARK.c b/extensions/libxt_CONNMARK.c
index 3cf62f07ebb294540e6affe7b978d46f3d0c1c02..1951e672ebbb10edd14611139d03f8bdeb53c3e8 100644 (file)
--- a/extensions/libxt_CONNMARK.c
+++ b/extensions/libxt_CONNMARK.c
@@ -312,6 +312,8 @@ connmark_tg_print(const void *ip, const struct xt_entry_target *target,
                        printf("CONNMARK or 0x%x ", info->ctmark);
                else if (info->ctmask == 0)
                        printf("CONNMARK xor 0x%x ", info->ctmark);
+               else if (info->ctmask == 0xFFFFFFFFU)
+                       printf("CONNMARK set 0x%x ", info->ctmark);
                else
                        printf("CONNMARK xset 0x%x/0x%x ",
                               info->ctmark, info->ctmask);