diff options
| author |   Eric Leblond <eric@inl.fr> | 2009-02-18 15:29:23 +0100 |
|---|---|---|
| committer |   Patrick McHardy <kaber@trash.net> | 2009-02-18 15:29:23 +0100 |
| commit | 5ca431f9ae8db8c6edb9c64bebe6d6521077afd6 (patch) | |
| tree | 3458815f1b4ce2ff6961e99015b88f33571f0d38 /include/linux/netfilter/xt_NFLOG.h | |
| parent | netfilter: nf_conntrack_ipv6: fix nf_log_packet message in icmpv6 conntrack (diff) | |
| download | linux-dev-5ca431f9ae8db8c6edb9c64bebe6d6521077afd6.tar.xz linux-dev-5ca431f9ae8db8c6edb9c64bebe6d6521077afd6.zip | |
netfilter: nfnetlink_log: fix per-rule qthreshold override
In NFLOG the per-rule qthreshold should overrides per-instance only
it is set. With current code, the per-rule qthreshold is 1 if not set
and it overrides the per-instance qthreshold.
This patch modifies the default xt_NFLOG threshold from 1 to
0. Thus a value of 0 means there is no per-rule setting and the instance
parameter has to apply.
Signed-off-by: Eric Leblond <eric@inl.fr>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Diffstat (limited to 'include/linux/netfilter/xt_NFLOG.h')
| -rw-r--r-- | include/linux/netfilter/xt_NFLOG.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/include/linux/netfilter/xt_NFLOG.h b/include/linux/netfilter/xt_NFLOG.h index cdcd0ed58f7a..4b36aeb46a10 100644 --- a/include/linux/netfilter/xt_NFLOG.h +++ b/include/linux/netfilter/xt_NFLOG.h @@ -2,7 +2,7 @@ #define _XT_NFLOG_TARGET #define XT_NFLOG_DEFAULT_GROUP 0x1 -#define XT_NFLOG_DEFAULT_THRESHOLD 1 +#define XT_NFLOG_DEFAULT_THRESHOLD 0 #define XT_NFLOG_MASK 0x0 |