Re: [PATCH nft 2/3] src: statement: disable reject statement type omission for bridge

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Jun 18, 2019 at 08:43:58PM +0200, Florian Westphal wrote:
> add rule bridge test-bridge input reject with icmp type port-unreachable
> 
> ... will be printed as 'reject', which is fine on ip family, but not on
> bridge -- 'with icmp type' adds an ipv4 dependency, but simple reject
> does not (it will use icmpx to also reject ipv6 packets with an icmpv6 error).
> 
> Add a toggle to supress short-hand versions in this case.
> 
> Signed-off-by: Florian Westphal <fw@xxxxxxxxx>

Acked-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux