From: Harald Welte <laforge@gnumonks.org>
Date: Wed, 26 Nov 2003 12:50:38 +0000 (+0000)
Subject: add mac check
X-Git-Tag: v1.3.0-rc1~153
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=db986e8a33ddd84be9045494d8d94ffd775be0fb;p=thirdparty%2Fiptables.git

add mac check
---

diff --git a/extensions/libipt_CLUSTERIP.c b/extensions/libipt_CLUSTERIP.c
index 6741fd70..55e86c5c 100644
--- a/extensions/libipt_CLUSTERIP.c
+++ b/extensions/libipt_CLUSTERIP.c
@@ -118,6 +118,8 @@ parse(int c, char **argv, int invert, unsigned int *flags,
 		if (*flags & PARAM_MAC)
 			exit_error(PARAMETER_PROBLEM, "Can only specify MAC once\n");
 		parse_mac(optarg, cipinfo->clustermac);
+		if (!(cipinfo->clustermac[0] & 0x01))
+			exit_error(PARAMETER_PROBLEM, "MAC has to be a multicast ethernet address\n");
 		*flags |= PARAM_MAC;
 		break;
 	case '4':