[PATCH] ipt_multiport invert fix

[Harald Welte <laforge@gnumonks.org>]

[-- Attachment #1.1: Type: text/plain, Size: 574 bytes --]

Hi Dave!

This is the first of a series of patches you will receive from me today.

Please apply to 2.4.x and 2.5.x, thanks.


Author: Marcus Sundberg <marcus@ingate.com>

This patch fixes the multiport match, when it is used in combination
with the invert (!) flag.

-- 
- Harald Welte / laforge@gnumonks.org               http://www.gnumonks.org/
============================================================================
"If this were a dictatorship, it'd be a heck of a lot easier, just so long
 as I'm the dictator."  --  George W. Bush Dec 18, 2000

[-- Attachment #1.2: ipt_multiport-invfix.patch --]
[-- Type: text/plain, Size: 658 bytes --]

diff -ur linux.current/net/ipv4/netfilter/ipt_multiport.c linux-mine/net/ipv4/netfilter/ipt_multiport.c
--- linux-2.4.19-rc1/net/ipv4/netfilter/ipt_multiport.c	Tue Jun 20 23:32:27 2000
+++ linux/net/ipv4/netfilter/ipt_multiport.c	Tue Jul  9 10:43:23 2002
@@ -78,7 +78,7 @@
 
 	/* Must specify proto == TCP/UDP, no unknown flags or bad count */
 	return (ip->proto == IPPROTO_TCP || ip->proto == IPPROTO_UDP)
-		&& !(ip->flags & IPT_INV_PROTO)
+		&& !(ip->invflags & IPT_INV_PROTO)
 		&& matchsize == IPT_ALIGN(sizeof(struct ipt_multiport))
 		&& (multiinfo->flags == IPT_MULTIPORT_SOURCE
 		    || multiinfo->flags == IPT_MULTIPORT_DESTINATION


[-- Attachment #2: Type: application/pgp-signature, Size: 232 bytes --]