]> git.ipfire.org Git - thirdparty/libvirt.git/commit
projects / thirdparty / libvirt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3d0e3c1) | patch
nwfilter: Use -m conntrack rather than -m state
authorStefan Berger <stefanb@linux.vnet.ibm.com>
Wed, 7 Aug 2013 00:30:46 +0000 (20:30 -0400)
committerStefan Berger <stefanb@us.ibm.com>
Wed, 7 Aug 2013 00:30:46 +0000 (20:30 -0400)
commit06844ccbaa8544d7d08d568aff37bc4e3648f304
tree551811f0a12f68894746bff8cfed36e97bc272d4tree | snapshot
parent3d0e3c1a297bcecb774902774bcd21f0ac4cfa1ccommit | diff
nwfilter: Use -m conntrack rather than -m state

Since iptables version 1.4.16 '-m state --state NEW' is converted to
'-m conntrack --ctstate NEW'. Therefore, when encountering this or later
versions of iptables use '-m conntrack --ctstate'.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
src/nwfilter/nwfilter_ebiptables_driver.c diff | blob | blame | history
Mirror of https://github.com/libvirt/libvirt.git