Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 3d8c6dce authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso
Browse files

netfilter: xt_TPROXY: fix invflags check in tproxy_tg6_check() 



We have to check for IP6T_INV_PROTO in invflags, instead of flags.

Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
Acked-by: default avatarBalazs Scheidler <bazsi@balabit.hu>
parent 4017a7ee

net/netfilter/xt_TPROXY.c

+2 −2
Original line number Diff line number Diff line
@@ -513,8 +513,8 @@ static int tproxy_tg6_check(const struct xt_tgchk_param *par) 
{

	const struct ip6t_ip6 *i = par->entryinfo;



	if ((i->proto == IPPROTO_TCP || i->proto == IPPROTO_UDP)

	    && !(i->flags & IP6T_INV_PROTO))

	if ((i->proto == IPPROTO_TCP || i->proto == IPPROTO_UDP) &&

	    !(i->invflags & IP6T_INV_PROTO))

		return 0;



	pr_info("Can be used only in combination with "