Now real server can have different address family only for tunneling. For other modes it must match the service. Signed-off-by: Julian Anastasov <ja@xxxxxx> --- ipvsadm.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/ipvsadm.c b/ipvsadm.c index d12070e..3000117 100644 --- a/ipvsadm.c +++ b/ipvsadm.c @@ -788,6 +788,12 @@ static int process_options(int argc, char **argv, int reading_stdin) (ce.dest.conn_flags == IP_VS_CONN_F_TUNNEL || ce.dest.conn_flags == IP_VS_CONN_F_DROUTE)) ce.dest.port = ce.svc.port; + + /* Tunneling allows different address family */ + if (ce.dest.af != ce.svc.af && + ce.dest.conn_flags != IP_VS_CONN_F_TUNNEL) + fail(2, "Different address family is allowed only " + "for tunneling servers"); } switch (ce.cmd) { -- 1.9.0 -- To unsubscribe from this list: send the line "unsubscribe lvs-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html