welterde/l2tpns
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

layer 4 info implies !frag

Browse source
This commit is contained in:
Brendan O'Dea 2005-11-14 21:08:30 +00:00
parent f7ec2b61a4
commit e1f961edee
1 changed files with 4 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

9
l2tpns.c
View file

@ -4,7 +4,7 @@
// Copyright (c) 2002 FireBrick (Andrews & Arnold Ltd / Watchfront Ltd) - GPL licenced
// vim: sw=8 ts=8
char const *cvs_id_l2tpns = "$Id: l2tpns.c,v 1.147 2005-11-14 08:38:02 bodea Exp $";
char const *cvs_id_l2tpns = "$Id: l2tpns.c,v 1.148 2005-11-14 21:08:30 bodea Exp $";
#include <arpa/inet.h>
#include <assert.h>
@ -5350,10 +5350,9 @@ int ip_filter(uint8_t *buf, int len, uint8_t filter)
if (frag_offset)
{
// non-fragmented deny rules are skipped if containing L4 matches
if (!rule->frag &&
(rule->src_ports.op || rule->dst_ports.op || rule->tcp_flag_op) &&
rule->action == FILTER_ACTION_DENY)
// layer 4 deny rules are skipped
if (rule->action == FILTER_ACTION_DENY &&
(rule->src_ports.op || rule->dst_ports.op || rule->tcp_flag_op))
continue;
}
else