For some reason, rules without ipv6.flags set (and proto set?) do not match at all at least on Linux 3.10. So with this patch, they do (and it took me a while to find out, sigh)
This commit is contained in:
parent
6bf84dc834
commit
3eb71223b4
|
@ -206,6 +206,8 @@ int add_pinhole(const char * ifname,
|
||||||
|
|
||||||
e = calloc(1, sizeof(struct ip6t_entry));
|
e = calloc(1, sizeof(struct ip6t_entry));
|
||||||
e->ipv6.proto = proto;
|
e->ipv6.proto = proto;
|
||||||
|
if (proto)
|
||||||
|
e->ipv6.flags |= IP6T_F_PROTO;
|
||||||
|
|
||||||
if(ifname)
|
if(ifname)
|
||||||
strncpy(e->ipv6.iniface, ifname, IFNAMSIZ);
|
strncpy(e->ipv6.iniface, ifname, IFNAMSIZ);
|
||||||
|
|
Loading…
Reference in New Issue