* [iptables-nftables v2 PATCH] nft: arp: inhibate -l option so only a fixed size arhln is in use
@ 2013-11-07 8:14 Tomasz Bursztyka
2013-11-08 7:39 ` Pablo Neira Ayuso
0 siblings, 1 reply; 2+ messages in thread
From: Tomasz Bursztyka @ 2013-11-07 8:14 UTC (permalink / raw)
To: netfilter-devel; +Cc: Tomasz Bursztyka
This is a temporary workaround mechanism until variable interface hardware
address length can be handled through nftables.
Signed-off-by: Tomasz Bursztyka <tomasz.bursztyka@linux.intel.com>
---
iptables/xtables-arp.c | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/iptables/xtables-arp.c b/iptables/xtables-arp.c
index 18f285c..5ab0fb4 100644
--- a/iptables/xtables-arp.c
+++ b/iptables/xtables-arp.c
@@ -1145,6 +1145,13 @@ int do_commandarp(struct nft_handle *h, int argc, char *argv[], char **table)
invert);
getlength_and_mask(argv[optind - 1], &fw.arp.arhln,
&fw.arp.arhln_mask);
+
+ if (fw.arp.arhln != 6) {
+ xtables_error(PARAMETER_PROBLEM,
+ "Only harware address length of"
+ " 6 is supported currently.");
+ }
+
break;
case 8:/* protocol length */
--
1.8.4.2
^ permalink raw reply related [flat|nested] 2+ messages in thread
end of thread, other threads:[~2013-11-08 7:39 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-11-07 8:14 [iptables-nftables v2 PATCH] nft: arp: inhibate -l option so only a fixed size arhln is in use Tomasz Bursztyka
2013-11-08 7:39 ` Pablo Neira Ayuso
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.