diff options
| author | Florian Westphal <[email protected]> | 2017-12-08 16:01:55 +0000 |
|---|---|---|
| committer | Pablo Neira Ayuso <[email protected]> | 2018-01-08 17:01:14 +0000 |
| commit | 84ba7dd71add05b52e55c60b4a3af9bb6194c73d (patch) | |
| tree | 2ce13364a97e60958169bc966862215912317f07 /net/netfilter/utils.c | |
| parent | netfilter: core: only allow one nat hook per hook point (diff) | |
| download | kernel-84ba7dd71add05b52e55c60b4a3af9bb6194c73d.tar.gz kernel-84ba7dd71add05b52e55c60b4a3af9bb6194c73d.zip | |
netfilter: nf_tables: reject nat hook registration if prio is before conntrack
No problem for iptables as priorities are fixed values defined in the
nat modules, but in nftables the priority its coming from userspace.
Reject in case we see that such a hook would not work.
Signed-off-by: Florian Westphal <[email protected]>
Signed-off-by: Pablo Neira Ayuso <[email protected]>
Diffstat (limited to 'net/netfilter/utils.c')
0 files changed, 0 insertions, 0 deletions