]> git.ipfire.org Git - thirdparty/iptables.git/commit
libip6t_frag: match any frag id by default
authorMichal Kubeček <mkubecek@suse.cz>
Tue, 7 Aug 2012 13:10:05 +0000 (15:10 +0200)
committerJan Engelhardt <jengelh@inai.de>
Wed, 8 Aug 2012 18:16:54 +0000 (20:16 +0200)
commit8a988f6707719340114bfa3d85ea3e1c80fe6f5f
tree77267decc10dd863ca0b05b5dd2305111a7f0075
parent8bbad67df4a7fb69ed73d4bf90dcb3cf77fd2a03
libip6t_frag: match any frag id by default

If no --fragid option is given, the frag extension only matches
fragments with a zero-valued "Identification" field. This behavior
deviates from what other extensions do (they match all values in this
case) and is unexpected, and therefore changed by this patch.

Additionally, --fragid 0:4294967295 leads to no output on `iptables
-S` because part of the code thinks that this would be the default,
when it is not.

So, default to match all frag values, such that iptables -S not
outputting anything also becomes correct.

Signed-off-by: Michal Kubecek <mkubecek@suse.cz>
Signed-off-by: Jan Engelhardt <jengelh@inai.de>
extensions/libip6t_frag.c