On Tue, Jun 18, 2019 at 08:43:57PM +0200, Florian Westphal wrote: > add rule bridge test-bridge input reject with icmp type ... > > is shown as > > ether type ip reject type ... > > i.e., the dependency is not removed. > > Allow dependency removal -- this adds a problem where some icmp types > will be shortened to 'reject', losing the icmp ipv4 dependency. > > Next patch resolves this problem by disabling short-hand abbreviations > for bridge reject statements. > > Signed-off-by: Florian Westphal <f...@strlen.de>
Acked-by: Pablo Neira Ayuso <pa...@netfilter.org>
