extensions: libipt_REJECT: Avoid to print the default reject with value in the translation
PATCH v2 1/1 extensions: libipt_REJECT: Avoid to print the default reject with value in the translation
Avoid to print the reject with value in the translation when the value is the default.
Before this patch:
$ sudo iptables-translate -A FORWARD -p TCP --dport 22 -j REJECT nft add rule ip filter FORWARD tcp dport 22 counter reject with icmp type port-unreachable
After this patch:
$ sudo iptables-translate -A FORWARD -p TCP --dport 22 -j REJECT nft add rule ip filter FORWARD tcp dport 22 counter reject
Signed-off-by Laura Garcia Liebana <[email protected]>
---
v2:
- Fix default constant, as Pablo suggested.
extensions/libipt_REJECT.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)
extensions/libipt_REJECT.c +3 -1
@@ -171,7 +171,9 @@ static int REJECT_xlate(const void *ip, const struct xt_entry_target *target,break ; } -if (reject->with ==IPT_TCP_RESET ) +if (reject->with ==IPT_ICMP_PORT_UNREACHABLE ) +xt_xlate_add (xl,"reject" ); +else if (reject->with ==IPT_TCP_RESET )xt_xlate_add (xl,"reject with %s" , reject_table_xlate[i].name);else
Signature · 1 line
2.7.0
Quoted 11 lines · Laura Garcia Liebana
Avoid to print the reject with value in the translation when the value is the default.
Before this patch:
$ sudo iptables-translate -A FORWARD -p TCP --dport 22 -j REJECT nft add rule ip filter FORWARD tcp dport 22 counter reject with icmp type port-unreachableAfter this patch:
$ sudo iptables-translate -A FORWARD -p TCP --dport 22 -j REJECT nft add rule ip filter FORWARD tcp dport 22 counter reject
Applied this too, thanks.