add mac check

diff --git a/extensions/libipt_CLUSTERIP.c b/extensions/libipt_CLUSTERIP.c
index 6741fd70e75e8ae7ec865821edcb2453018e391c..55e86c5ccab6689f1d7e2a4d1e5a246073d41be4 100644 (file)
--- a/extensions/libipt_CLUSTERIP.c
+++ b/extensions/libipt_CLUSTERIP.c
@@ -118,6 +118,8 @@ parse(int c, char **argv, int invert, unsigned int *flags,
                if (*flags & PARAM_MAC)
                        exit_error(PARAMETER_PROBLEM, "Can only specify MAC once\n");
                parse_mac(optarg, cipinfo->clustermac);
+               if (!(cipinfo->clustermac[0] & 0x01))
+                       exit_error(PARAMETER_PROBLEM, "MAC has to be a multicast ethernet address\n");
                *flags |= PARAM_MAC;
                break;
        case '4':