From: Florian Westphal Date: Mon, 5 Nov 2018 10:30:57 +0000 (+0100) Subject: extensions: libebt_ip6: fix ip6-dport negation X-Git-Tag: v1.8.2~28 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=9b127b7154029af612c4ffe6c08089973e9b8310;p=thirdparty%2Fiptables.git extensions: libebt_ip6: fix ip6-dport negation Fixes: 5c8ce9c6aede0 ("ebtables-compat: add 'ip6' match extension") Signed-off-by: Florian Westphal --- diff --git a/extensions/libebt_ip6.c b/extensions/libebt_ip6.c index ab1413ba..b8a5a5d8 100644 --- a/extensions/libebt_ip6.c +++ b/extensions/libebt_ip6.c @@ -353,7 +353,7 @@ brip6_parse(int c, char **argv, int invert, unsigned int *flags, break; case IP_DPORT: if (invert) - info->invflags |= EBT_IP6_DEST; + info->invflags |= EBT_IP6_DPORT; parse_port_range(NULL, optarg, info->dport); info->bitmask |= EBT_IP6_DPORT; break; diff --git a/extensions/libebt_ip6.t b/extensions/libebt_ip6.t index 98634800..9d4effdc 100644 --- a/extensions/libebt_ip6.t +++ b/extensions/libebt_ip6.t @@ -4,6 +4,7 @@ -p IPv6 --ip6-dst f00:ba::;=;OK -p IPv6 --ip6-tclass 0xFF;=;OK -p IPv6 --ip6-proto tcp --ip6-dport 22;=;OK +-p IPv6 --ip6-proto tcp --ip6-dport ! 22;=;OK -p IPv6 --ip6-proto udp --ip6-sport 1024:65535;=;OK -p IPv6 --ip6-proto 253;=;OK -p IPv6 --ip6-proto ipv6-icmp --ip6-icmp-type echo-request -j CONTINUE;=;OK