Commit b8ddd9ea authored Mar 26, 2014 by Kirill Tkhai Committed by Pablo Neira Ayuso Apr 03, 2014

netfilter: Add {ipt,ip6t}_osf aliases for xt_osf



There are no these aliases, so kernel can not request appropriate
match table:

$ iptables -I INPUT -p tcp -m osf --genre Windows --ttl 2 -j DROP
iptables: No chain/target/match by that name.

setsockopt() requests ipt_osf module, which is not present. Add
the aliases.

Signed-off-by: Kirill Tkhai <ktkhai@parallels.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

parent a00e7634

net/netfilter/xt_osf.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -422,4 +422,6 @@ module_exit(xt_osf_fini);
		MODULE_LICENSE("GPL");
		MODULE_AUTHOR("Evgeniy Polyakov <zbr@ioremap.net>");
		MODULE_DESCRIPTION("Passive OS fingerprint matching.");
		MODULE_ALIAS("ipt_osf");
		MODULE_ALIAS("ip6t_osf");
		MODULE_ALIAS_NFNL_SUBSYS(NFNL_SUBSYS_OSF);