From: Jan Engelhardt Date: Wed, 22 Jun 2011 09:15:34 +0000 (+0200) Subject: libxt_state: fix regression about inversion of main option X-Git-Tag: v1.4.12~3^2~12 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=70cb0a6d3e09f64f9a05870d694ac0160319de9a;p=thirdparty%2Fiptables.git libxt_state: fix regression about inversion of main option Signed-off-by: Jan Engelhardt --- diff --git a/extensions/libxt_state.c b/extensions/libxt_state.c index 3fc747d8..eff444c8 100644 --- a/extensions/libxt_state.c +++ b/extensions/libxt_state.c @@ -23,7 +23,7 @@ state_help(void) static const struct xt_option_entry state_opts[] = { {.name = "state", .id = O_STATE, .type = XTTYPE_STRING, - .flags = XTOPT_MAND}, + .flags = XTOPT_MAND | XTOPT_INVERT}, XTOPT_TABLEEND, }; diff --git a/tests/options-most.rules b/tests/options-most.rules index 125b5bf3..2b419e57 100644 --- a/tests/options-most.rules +++ b/tests/options-most.rules @@ -75,6 +75,8 @@ -A matches -A matches -m conntrack --ctexpire 5:4294967295 -A matches +-A matches -m conntrack ! --ctstate NEW ! --ctproto tcp ! --ctorigsrc ::1/127 ! --ctorigdst ::2/127 ! --ctreplsrc ::2/127 ! --ctrepldst ::2/127 ! --ctorigsrcport 3 ! --ctorigdstport 4 ! --ctreplsrcport 5 ! --ctrepldstport 6 ! --ctstatus ASSURED ! --ctexpire 8:9 +-A matches -A matches -p esp -m esp --espspi 1 -A matches -A matches -p esp -m esp --espspi :2