From 3eb71223b4b5735a92fa985e4c7756c59c1fef75 Mon Sep 17 00:00:00 2001 From: Markus Stenberg Date: Thu, 29 May 2014 17:56:48 +0300 Subject: [PATCH] For some reason, rules without ipv6.flags set (and proto set?) do not match at all at least on Linux 3.10. So with this patch, they do (and it took me a while to find out, sigh) --- miniupnpd/netfilter/iptpinhole.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/miniupnpd/netfilter/iptpinhole.c b/miniupnpd/netfilter/iptpinhole.c index 61ed41b..5cb0e0e 100644 --- a/miniupnpd/netfilter/iptpinhole.c +++ b/miniupnpd/netfilter/iptpinhole.c @@ -206,6 +206,8 @@ int add_pinhole(const char * ifname, e = calloc(1, sizeof(struct ip6t_entry)); e->ipv6.proto = proto; + if (proto) + e->ipv6.flags |= IP6T_F_PROTO; if(ifname) strncpy(e->ipv6.iniface, ifname, IFNAMSIZ);