tree 5f289b30073940a4d6a628f2920b8f1ecb64f0f4
parent b8c42eca0f224a00bf55b60ded81af14a1e07da1
author Florian Westphal <fw@strlen.de> 1324056846 +0100
committer Pablo Neira Ayuso <pablo@netfilter.org> 1324648539 +0100

libxt_connbytes: fix handling of --connbytes FROM

quoting man page:

match packets  from  a  connection  whose packets/bytes/average
packet size is more than FROM and less than TO bytes/packets. if
TO is omitted only FROM check is done.

But, when TO was omitted, we did treat it like "x:x" which is not
the same at all.

Before commit 09631dc60ce41bc484a42fcf4d4ddf7036820bd1
(libxt_connbytes: use guided option parser), we failed to parse
"--connbytes x" ('Bad range "x"'), but treated "x:" like "x:0xffffffff".

Also, restore the "from must be smaller than to" check.

Signed-off-by: Florian Westphal <fw@strlen.de>