Bug origin is in commit v1.4.11~26^2~17. Signed-off-by: Jan Engelhardt <jengelh@xxxxxxxxxx> --- extensions/libip6t_hbh.c | 1 + tests/options-most.rules | 2 ++ 2 files changed, 3 insertions(+), 0 deletions(-) diff --git a/extensions/libip6t_hbh.c b/extensions/libip6t_hbh.c index 809e80d..c0389ed 100644 --- a/extensions/libip6t_hbh.c +++ b/extensions/libip6t_hbh.c @@ -108,6 +108,7 @@ static void hbh_parse(struct xt_option_call *cb) case O_HBH_LEN: if (cb->invert) optinfo->invflags |= IP6T_OPTS_INV_LEN; + optinfo->flags |= IP6T_OPTS_LEN; break; case O_HBH_OPTS: optinfo->optsnr = parse_options(cb->arg, optinfo->opts); diff --git a/tests/options-most.rules b/tests/options-most.rules index 6839d89..1209091 100644 --- a/tests/options-most.rules +++ b/tests/options-most.rules @@ -94,6 +94,8 @@ -A matches -m hashlimit --hashlimit-upto 1/hour --hashlimit-burst 1 --hashlimit-name mini3 -A matches -m hashlimit --hashlimit-upto 1/day --hashlimit-burst 1 --hashlimit-name mini4 -A matches +-A matches -m hbh ! --hbh-len 5 +-A matches -A matches -m ipvs --vaddr fe80::/64 --vport 1 --vdir REPLY --vmethod GATE --vportctl 21 -A matches -A matches -m length --length 1 -- 1.7.3.4 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html