forecast: Compare the complete rules when deleting them

Same as the change in the connmark plugin.

References #1229.

diff --git a/src/libcharon/plugins/forecast/forecast_listener.c b/src/libcharon/plugins/forecast/forecast_listener.c
index 7e9361752e645e0c8de6bad24c081ef0d5562d10..8f7f2600c7f59bd55b88dbb3cf5bfc2b9973551a 100644 (file)
--- a/src/libcharon/plugins/forecast/forecast_listener.c
+++ b/src/libcharon/plugins/forecast/forecast_listener.c
@@ -160,7 +160,10 @@ static bool manage_rule(struct iptc_handle *ipth, const char *chain,
        }
        else
        {
-               if (!iptc_delete_entry(chain, e, "", ipth))
+               u_char matchmask[e->next_offset];
+
+               memset(matchmask, 255, sizeof(matchmask));
+               if (!iptc_delete_entry(chain, e, matchmask, ipth))
                {
                        DBG1(DBG_CFG, "deleting %s rule failed: %s",
                                 chain, iptc_strerror(errno));