On Wed, Feb 09, 2022 at 04:41:07PM +0100, Phil Sutter wrote: > Some test results are not consistent between variants: > > * CLUSTERIP is not supported with nft_compat, so all related tests fail > with iptables-nft. > * iptables-legacy mandates TCPMSS be combined with SYN flag match, > iptables-nft does not care. (Or precisely, xt_TCPMSS.ko can't validate > match presence.) > > Introduce an optional fourth test spec field to specify the variant it > applies to. Consequently, the opposite result is expected with the other > variant. LGTM, thanks
