Commit d1cbbe08 authored by Patrick McHardy's avatar Patrick McHardy

[NETFILTER]: Relax hook check in ipt_CLASSIFY

Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
Signed-off-by: default avatarHarald Welte <laforge@netfilter.org>
Signed-off-by: default avatarDavid S. Miller <davem@redhat.com>
parent f55fe5a9
...@@ -54,15 +54,17 @@ checkentry(const char *tablename, ...@@ -54,15 +54,17 @@ checkentry(const char *tablename,
return 0; return 0;
} }
if (hook_mask & ~(1 << NF_IP_POST_ROUTING)) { if (hook_mask & ~((1 << NF_IP_LOCAL_OUT) | (1 << NF_IP_FORWARD) |
printk(KERN_ERR "CLASSIFY: only valid in POST_ROUTING.\n"); (1 << NF_IP_POST_ROUTING))) {
printk(KERN_ERR "CLASSIFY: only valid in LOCAL_OUT, FORWARD "
"and POST_ROUTING.\n");
return 0; return 0;
} }
if (strcmp(tablename, "mangle") != 0) { if (strcmp(tablename, "mangle") != 0) {
printk(KERN_WARNING "CLASSIFY: can only be called from " printk(KERN_ERR "CLASSIFY: can only be called from "
"\"mangle\" table, not \"%s\".\n", "\"mangle\" table, not \"%s\".\n",
tablename); tablename);
return 0; return 0;
} }
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment