tree 631e2578c867e398b0d939b26727c4056277205d
parent c18f2ce7f61c7e7ae3bd207ef6337a1be0c7aff3
author Phil Oester <kernel@linuxace.com> 1371732816 -0400
committer Pablo Neira Ayuso <pablo@netfilter.org> 1374849380 +0200

iptables: iptables-xml: Fix various parsing bugs

There are two bugs in iptables-xml do_rule_part parsing corrected by this patch:

1) Ignore "-A <chain>" instead of just "-A"
2) When checking to see if we need a <match> tag, inversion needs to be taken
   into account

This closes netfilter bugzilla #679.

Signed-off-by: Phil Oester <kernel@linuxace.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>