tree 178a99c4a55c746d4badbaf93df35a43f500dd52
parent cdc78b1d6bd7b48ec05d78fc6e6cd98473f40357
author Pablo Neira Ayuso <pablo@netfilter.org> 1377023066 +0200
committer Pablo Neira Ayuso <pablo@netfilter.org> 1388443844 +0100

nft: fix wrong flags handling in print_firewall_details

Unfortunately, IPT_F_* and IP6T_F_* don't overlap, therefore, we have
to add an specific function to print the fragment flag, otherwise
xtables -6 misinterprets the protocol flag, ie.

Chain INPUT (policy ACCEPT)
           tcp  -f  ::/0                 ::/0

Note that -f should not show up. This problem was likely added with
the IPv6 support for the compatibility layer.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>