Re: [PATCH nft] evaluate: flag fwd and queue statements as terminal

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Sep 06, 2019 at 04:43:37PM +0200, Florian Westphal wrote:
> Both queue and fwd statement end evaluation of a rule:
> 
> in
> ... fwd to "eth0" accept
> ... queue accept
> 
> "accept" is redundant and never evaluated in the kernel.
> Add the missing "TERMINAL" flag so the evaluation step will catch
> any trailing expressions:
> 
> nft add rule filter input queue counter
> Error: Statement after terminal statement has no effect
> 
> Signed-off-by: Florian Westphal <fw@xxxxxxxxx>

Acked-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux