For some reason, rules without ipv6.flags set (and proto set?) do not match at all at least on Linux 3.10. So with this patch, they do (and it took me a while to find out, sigh)
This commit is contained in:
parent
6bf84dc834
commit
3eb71223b4
|
@ -206,6 +206,8 @@ int add_pinhole(const char * ifname,
|
|||
|
||||
e = calloc(1, sizeof(struct ip6t_entry));
|
||||
e->ipv6.proto = proto;
|
||||
if (proto)
|
||||
e->ipv6.flags |= IP6T_F_PROTO;
|
||||
|
||||
if(ifname)
|
||||
strncpy(e->ipv6.iniface, ifname, IFNAMSIZ);
|
||||
|
|
Loading…
Reference in New Issue