With "!flags", any option will be accepted. The extensions however want one very specific option to be used (or wrong help text). Commits: DNAT: v1.3.8~23, osf: v1.4.6~3 Signed-off-by: Jan Engelhardt <jengelh@xxxxxxxxxx> --- extensions/libipt_DNAT.c | 2 +- extensions/libipt_ECN.c | 2 +- extensions/libxt_osf.c | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/extensions/libipt_DNAT.c b/extensions/libipt_DNAT.c index 34d3777..49c74e1 100644 --- a/extensions/libipt_DNAT.c +++ b/extensions/libipt_DNAT.c @@ -190,7 +190,7 @@ static int DNAT_parse(int c, char **argv, int invert, unsigned int *flags, static void DNAT_check(unsigned int flags) { - if (!flags) + if (!(flags & IPT_DNAT_OPT_DEST)) xtables_error(PARAMETER_PROBLEM, "You must specify --to-destination"); } diff --git a/extensions/libipt_ECN.c b/extensions/libipt_ECN.c index 6bfc1b3..e1f29b6 100644 --- a/extensions/libipt_ECN.c +++ b/extensions/libipt_ECN.c @@ -97,7 +97,7 @@ static void ECN_check(unsigned int flags) { if (!flags) xtables_error(PARAMETER_PROBLEM, - "ECN target: Parameter --ecn-tcp-remove is required"); + "ECN target: An operation is required"); } static void ECN_print(const void *ip, const struct xt_entry_target *target, diff --git a/extensions/libxt_osf.c b/extensions/libxt_osf.c index a97884b..20acfea 100644 --- a/extensions/libxt_osf.c +++ b/extensions/libxt_osf.c @@ -114,7 +114,7 @@ static int osf_parse(int c, char **argv, int invert, unsigned int *flags, static void osf_final_check(unsigned int flags) { - if (!flags) + if (!(flags & XT_OSF_GENRE)) xtables_error(PARAMETER_PROBLEM, "OS fingerprint match: You must specify `--genre'"); } -- 1.7.1 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html