netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* ip6tables: Warn about use of DROP in nat table
@ 2016-06-10 10:16 Thomas Woerner
  2016-06-10 10:32 ` Jan Engelhardt
  0 siblings, 1 reply; 2+ messages in thread
From: Thomas Woerner @ 2016-06-10 10:16 UTC (permalink / raw)
  To: netfilter-devel

Hello,

in iptables.c there is a check of DROP usage in the nat table.In 
ip6tables, this check is not there.Is this intentional?

These are the commits for iptables that added and modified the 
check:1eada72b, 9bb76094 and e0390bee

What do you think about adding this also to ip6ables?

Regards,
Thomas

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: ip6tables: Warn about use of DROP in nat table
  2016-06-10 10:16 ip6tables: Warn about use of DROP in nat table Thomas Woerner
@ 2016-06-10 10:32 ` Jan Engelhardt
  0 siblings, 0 replies; 2+ messages in thread
From: Jan Engelhardt @ 2016-06-10 10:32 UTC (permalink / raw)
  To: Thomas Woerner; +Cc: netfilter-devel

On Friday 2016-06-10 12:16, Thomas Woerner wrote:

> in iptables.c there is a check of DROP usage in the nat table.In ip6tables,
> this check is not there.Is this intentional?

It must be an oversight, since IPv6 did not have nat back then.

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2016-06-10 10:32 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2016-06-10 10:16 ip6tables: Warn about use of DROP in nat table Thomas Woerner
2016-06-10 10:32 ` Jan Engelhardt

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).