Without this patch, arptables-nft would complain about an unknown option. Signed-off-by: Phil Sutter <phil@xxxxxx> --- iptables/xtables-arp.c | 2 +- iptables/xtables.c | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/iptables/xtables-arp.c b/iptables/xtables-arp.c index cca19438a877e..212b5f1347206 100644 --- a/iptables/xtables-arp.c +++ b/iptables/xtables-arp.c @@ -89,7 +89,7 @@ static void printhelp(const struct xtables_rule_match *m); struct xtables_globals arptables_globals = { .option_offset = 0, .program_version = PACKAGE_VERSION, - .optstring = OPTSTRING_COMMON "C:R:S::" "h::l:nv" /* "m:" */, + .optstring = OPTSTRING_COMMON "C:R:S::" "h::l:m:nv", .orig_opts = original_opts, .exit_err = xtables_exit_error, .compat_rev = nft_compatible_revision, diff --git a/iptables/xtables.c b/iptables/xtables.c index 5b5c875dc3a6c..b8c4e2737a96a 100644 --- a/iptables/xtables.c +++ b/iptables/xtables.c @@ -575,6 +575,8 @@ void do_parse(struct nft_handle *h, int argc, char *argv[], break; case 'm': + if (h->family == NFPROTO_ARP) + break; command_match(cs, invert); break; -- 2.33.0