The first expression in that rule is not eliminated in evaluation phase,
so there is no reason why it should be while delinearizing.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
*bridge;test-bridge;input
-ip protocol icmp icmp type echo-request;ok;icmp type echo-request
+ip protocol icmp icmp type echo-request;ok;ip protocol 1 icmp type echo-request
icmp type echo-request;ok
ip6 nexthdr icmpv6 icmpv6 type echo-request;ok;ip6 nexthdr 58 icmpv6 type echo-request
icmpv6 type echo-request;ok
*inet;test-inet;input
-ip protocol icmp icmp type echo-request;ok;icmp type echo-request
+ip protocol icmp icmp type echo-request;ok;ip protocol 1 icmp type echo-request
icmp type echo-request;ok
ip6 nexthdr icmpv6 icmpv6 type echo-request;ok;ip6 nexthdr 58 icmpv6 type echo-request
icmpv6 type echo-request;ok