xtables: ipv6: fix -D with -p

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/iptables/nft.c b/iptables/nft.c
index 9c6056a4988ab80d647796ba6547f2abe279c420..cef1f32e5fe9f124b0fc5760b8312246aaefcb98 100644 (file)
--- a/iptables/nft.c
+++ b/iptables/nft.c
@@ -2349,6 +2349,7 @@ nft_parse_payload_ipv6(uint32_t offset, struct nft_rule_expr_iter *iter,
                break;
        case offsetof(struct ip6_hdr, ip6_nxt):
                get_cmp_data(iter, &proto, sizeof(proto), &inv);
+               cs->fw6.ipv6.flags |= IP6T_F_PROTO;
                cs->fw6.ipv6.proto = proto;
                if (inv)
                        cs->fw6.ipv6.invflags |= IPT_INV_PROTO;