Re: [PATCH] ip6tables: Warn about use of DROP in nat table

2016-06-15 Thread Pablo Neira Ayuso
On Fri, Jun 10, 2016 at 02:57:58PM +0200, Thomas Woerner wrote: > Clone of 1eada72b with 9bb76094 and e0390bee on top. Applied, thanks Thomas. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majord...@vger.kernel.org More majordomo info at

[PATCH] ip6tables: Warn about use of DROP in nat table

2016-06-10 Thread Thomas Woerner
Clone of 1eada72b with 9bb76094 and e0390bee on top. Signed-off-by: Thomas Woerner --- :100644 100644 2731209... c48ddf9... M iptables/ip6tables.c iptables/ip6tables.c | 7 +++ 1 file changed, 7 insertions(+) diff --git a/iptables/ip6tables.c b/iptables/ip6tables.c

Re: ip6tables: Warn about use of DROP in nat table

2016-06-10 Thread Jan Engelhardt
On Friday 2016-06-10 12:16, Thomas Woerner wrote: > in iptables.c there is a check of DROP usage in the nat table.In ip6tables, > this check is not there.Is this intentional? It must be an oversight, since IPv6 did not have nat back then. -- To unsubscribe from this list: send the line

ip6tables: Warn about use of DROP in nat table

2016-06-10 Thread Thomas Woerner
Hello, in iptables.c there is a check of DROP usage in the nat table.In ip6tables, this check is not there.Is this intentional? These are the commits for iptables that added and modified the check:1eada72b, 9bb76094 and e0390bee What do you think about adding this also to ip6ables?