extensions: libipt_LOG: Avoid to print the default log level in the translation

Avoid to print the log level in the translation when the level is the
default value.

Example:

$ sudo iptables-translate -t filter -A INPUT -m icmp ! --icmp-type 10 -j LOG
nft add rule ip filter INPUT icmp type != router-solicitation counter log

Signed-off-by: Laura Garcia Liebana <nevola@gmail.com>

diff --git a/extensions/libipt_LOG.c b/extensions/libipt_LOG.c
index afe8c9f0f402f47c8c06def1120c56d33770fd89..f81eb8df3f31034712825ac613967d6cb66b770d 100644 (file)
--- a/extensions/libipt_LOG.c
+++ b/extensions/libipt_LOG.c
@@ -194,7 +194,8 @@ static int LOG_xlate(const void *ip, const struct xt_entry_target *target,
                xt_xlate_add(xl, "prefix \\\"%s\\\" ", loginfo->prefix);
 
        for (i = 0; i < ARRAY_SIZE(ipt_log_xlate_names); ++i)
-               if (loginfo->level == ipt_log_xlate_names[i].level) {
+               if (loginfo->level != LOG_DEFAULT_LEVEL &&
+                   loginfo->level == ipt_log_xlate_names[i].level) {
                        xt_xlate_add(xl, "level %s ",
                                   ipt_log_xlate_names[i].name);
                        break;