hi, - remove check of find_proto(), since do_command() can be called multiple times, and match will be loaded after first call. - remove the '-C' option (from help msgs) kisza -- Andras Kis-Szabo Security Development, Design and Audit -------------------------/ Zorp, NetFilter and IPv6 [EMAIL PROTECTED] /-----Member of the BUTE-MIS-SEARCHlab------>
--- netfilter.old/userspace/ip6tables.c Sun May 5 20:22:35 2002 +++ netfilter/userspace/ip6tables.c Sun May 5 20:29:50 2002 @@ -284,7 +284,7 @@ struct ip6tables_target *t = NULL; printf("%s v%s\n\n" -"Usage: %s -[ADC] chain rule-specification [options]\n" +"Usage: %s -[AD] chain rule-specification [options]\n" " %s -[RI] chain rulenum rule-specification [options]\n" " %s -D chain rulenum [options]\n" " %s -[LFZ] [chain] [options]\n" @@ -310,7 +310,7 @@ " --list -L [chain] List the rules in a chain or all chains\n" " --flush -F [chain] Delete all rules in chain or all chains\n" " --zero -Z [chain] Zero counters in chain or all chains\n" -" --check -C chain Test this packet on chain\n" +/* " --check -C chain Test this packet on chain\n" */ " --new -N chain Create a new user-defined chain\n" " --delete-chain\n" " -X [chain] Delete a user-defined chain\n" @@ -2054,8 +2054,6 @@ actually hear this code suck. */ if (m == NULL && protocol - && !find_proto(protocol, DONT_LOAD, - options&OPT_NUMERIC) && (m = find_proto(protocol, TRY_LOAD, options&OPT_NUMERIC))) { /* Try loading protocol */