From: Patrick McHardy <kaber@trash.net>
Date: Wed, 28 Nov 2007 09:50:22 +0000 (+0000)
Subject: Fix connlimit output for inverted --connlimit-above: ! > is <=, not <
X-Git-Tag: v1.4.0~35
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e33bf8eb6467d8d3acf16efa65b09844aea59824;p=thirdparty%2Fiptables.git

Fix connlimit output for inverted --connlimit-above: ! > is <=, not <
---

diff --git a/extensions/libxt_connlimit.c b/extensions/libxt_connlimit.c
index 1b86d6e9..31f93110 100644
--- a/extensions/libxt_connlimit.c
+++ b/extensions/libxt_connlimit.c
@@ -149,7 +149,7 @@ static void connlimit_print4(const void *ip,
 	const struct xt_connlimit_info *info = (const void *)match->data;
 
 	printf("#conn/%u %s %u ", count_bits4(info->v4_mask),
-	       info->inverse ? "<" : ">", info->limit);
+	       info->inverse ? "<=" : ">", info->limit);
 }
 
 static void connlimit_print6(const void *ip,
@@ -157,7 +157,7 @@ static void connlimit_print6(const void *ip,
 {
 	const struct xt_connlimit_info *info = (const void *)match->data;
 	printf("#conn/%u %s %u ", count_bits6(info->v6_mask),
-	       info->inverse ? "<" : ">", info->limit);
+	       info->inverse ? "<=" : ">", info->limit);
 }
 
 static void connlimit_save4(const void *ip, const struct xt_entry_match *match)