* [iptables-nftables v2 PATCH] nft: arp: inhibate -l option so only a fixed size arhln is in use
@ 2013-11-07 8:14 Tomasz Bursztyka
2013-11-08 7:39 ` Pablo Neira Ayuso
0 siblings, 1 reply; 2+ messages in thread
From: Tomasz Bursztyka @ 2013-11-07 8:14 UTC (permalink / raw)
To: netfilter-devel; +Cc: Tomasz Bursztyka
This is a temporary workaround mechanism until variable interface hardware
address length can be handled through nftables.
Signed-off-by: Tomasz Bursztyka <tomasz.bursztyka@linux.intel.com>
---
iptables/xtables-arp.c | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/iptables/xtables-arp.c b/iptables/xtables-arp.c
index 18f285c..5ab0fb4 100644
--- a/iptables/xtables-arp.c
+++ b/iptables/xtables-arp.c
@@ -1145,6 +1145,13 @@ int do_commandarp(struct nft_handle *h, int argc, char *argv[], char **table)
invert);
getlength_and_mask(argv[optind - 1], &fw.arp.arhln,
&fw.arp.arhln_mask);
+
+ if (fw.arp.arhln != 6) {
+ xtables_error(PARAMETER_PROBLEM,
+ "Only harware address length of"
+ " 6 is supported currently.");
+ }
+
break;
case 8:/* protocol length */
--
1.8.4.2
^ permalink raw reply related [flat|nested] 2+ messages in thread
* Re: [iptables-nftables v2 PATCH] nft: arp: inhibate -l option so only a fixed size arhln is in use
2013-11-07 8:14 [iptables-nftables v2 PATCH] nft: arp: inhibate -l option so only a fixed size arhln is in use Tomasz Bursztyka
@ 2013-11-08 7:39 ` Pablo Neira Ayuso
0 siblings, 0 replies; 2+ messages in thread
From: Pablo Neira Ayuso @ 2013-11-08 7:39 UTC (permalink / raw)
To: Tomasz Bursztyka; +Cc: netfilter-devel
On Thu, Nov 07, 2013 at 10:14:37AM +0200, Tomasz Bursztyka wrote:
> This is a temporary workaround mechanism until variable interface hardware
> address length can be handled through nftables.
Applied, thanks.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2013-11-08 7:39 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-11-07 8:14 [iptables-nftables v2 PATCH] nft: arp: inhibate -l option so only a fixed size arhln is in use Tomasz Bursztyka
2013-11-08 7:39 ` Pablo Neira Ayuso
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).