commit | e2fe35c17fed62d4ab5038fa9bc489e967ff8416 | [log] [tgz] |
---|---|---|
author | Jan Engelhardt <jengelh@medozas.de> | Sat Jul 18 15:22:30 2009 +0200 |
committer | Jan Engelhardt <jengelh@medozas.de> | Mon Aug 10 13:35:31 2009 +0200 |
tree | 84a4b0b688276b6788081f441984abd01d036b4d | |
parent | 90e7d4ab5c8b0c4c2e00e4893977f6aeec0f18f1 [diff] |
netfilter: xtables: check for standard verdicts in policies This adds the second check that Rusty wanted to have a long time ago. :-) Base chain policies must have absolute verdicts that cease processing in the table, otherwise rule execution may continue in an unexpected spurious fashion (e.g. next chain that follows in memory). Signed-off-by: Jan Engelhardt <jengelh@medozas.de>