]> git.ipfire.org Git - thirdparty/iptables.git/commit
ebtables-translate: suppress redundant protocols
authorFlorian Westphal <fw@strlen.de>
Tue, 8 May 2018 08:15:11 +0000 (10:15 +0200)
committerFlorian Westphal <fw@strlen.de>
Thu, 10 May 2018 00:31:05 +0000 (02:31 +0200)
commit6454d7dc89f83920cd08606fdff43358c7e64a53
tree33294b8d8675aaa706fb12842af294408360bbdf
parent07f4ca96816886635acfb9478b2d04929938eb78
ebtables-translate: suppress redundant protocols

kernel would reject ip, ip6 etc. without -p ip, -p ip6.
So add it.  On reverse, search the match list to decide if -p
has to be translated or not.

Also, icmp and icmpv6 also imply l3 protocol, so no need to translate
that either.

Signed-off-by: Florian Westphal <fw@strlen.de>
extensions/libebt_ip.c
extensions/libebt_ip.txlate
extensions/libebt_ip6.c
extensions/libebt_ip6.txlate
extensions/libebt_vlan.txlate
iptables/nft-bridge.c