extensions: libip6t_LOG: Avoid to print the default log level in the translation

Remove the log level when default is used

Before:
	$ sudo iptables-translate -I INPUT -j LOG
	nft add rule filter INPUT log level warning

After:
	$ sudo iptables-translate -I INPUT -j LOG
	nft add rule filter INPUT counter log

Signed-off-by: Roberto García <rodanber@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/extensions/libip6t_LOG.c b/extensions/libip6t_LOG.c
index 7841e5780053b850e228f4500eb4d1294c6bbd60..3c5075e3492cb60898b63de793f3aa40178b1e78 100644 (file)
--- a/extensions/libip6t_LOG.c
+++ b/extensions/libip6t_LOG.c
@@ -194,7 +194,8 @@ static int LOG_xlate(const void *ip, const struct xt_entry_target *target,
                xt_xlate_add(xl, "prefix \\\"%s\\\" ", loginfo->prefix);
 
        for (i = 0; i < ARRAY_SIZE(ip6t_log_xlate_names); ++i)
-               if (loginfo->level == ip6t_log_xlate_names[i].level) {
+               if (loginfo->level == ip6t_log_xlate_names[i].level &&
+                   loginfo->level != LOG_DEFAULT_LEVEL) {
                        xt_xlate_add(xl, "level %s",
                                   ip6t_log_xlate_names[i].name);
                        break;