From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Fri, 25 Oct 2013 15:01:58 +0000 (+0200)
Subject: netlink_linearize: finish reject support
X-Git-Tag: v0.099~57
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b8b1b43234bd7943a076899bcf2abd8cdd06d7f5;p=thirdparty%2Fnftables.git

netlink_linearize: finish reject support

This patch finishes the reject support.

Reported-by: Jiri Benc <jbenc@redhat.com>
Tested-by: Jiri Benc <jbenc@redhat.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

diff --git a/src/netlink_linearize.c b/src/netlink_linearize.c
index fd91155bd..da8be2023 100644
--- a/src/netlink_linearize.c
+++ b/src/netlink_linearize.c
@@ -561,7 +561,9 @@ static void netlink_gen_reject_stmt(struct netlink_linearize_ctx *ctx,
 {
 	struct nft_rule_expr *nle;
 
-	nle = alloc_nft_expr(NULL);
+	nle = alloc_nft_expr("reject");
+	nft_rule_expr_set_u32(nle, NFT_EXPR_REJECT_TYPE, stmt->reject.type);
+	nft_rule_expr_set_u8(nle, NFT_EXPR_REJECT_CODE, 0);
 	nft_rule_add_expr(ctx->nlr, nle);
 }