do not show potentially dangerous parameteres of ECN target (Alexey)
diff --git a/extensions/libipt_ECN.c b/extensions/libipt_ECN.c
index 99b0f0e..4b33254 100644
--- a/extensions/libipt_ECN.c
+++ b/extensions/libipt_ECN.c
@@ -6,7 +6,7 @@
*
* libipt_ECN.c borrowed heavily from libipt_DSCP.c
*
- * $Id: libipt_ECN.c,v 1.8 2002/08/05 19:36:15 laforge Exp $
+ * $Id: libipt_ECN.c,v 1.9 2002/08/06 06:50:04 laforge Exp $
*/
#include <stdio.h>
#include <string.h>
@@ -25,14 +25,17 @@
{
printf(
"ECN target v%s options\n"
-" --ecn-tcp-remove Remove all ECN bits from TCP header\n"
+" --ecn-tcp-remove Remove all ECN bits from TCP header\n",
+ IPTABLES_VERSION, IPTABLES_VERSION);
+}
+
+#if 0
"ECN target v%s EXPERIMENTAL options (use with extreme care!)\n"
" --ecn-ip-ect Set the IPv4 ECT codepoint (0 to 3)\n"
" --ecn-tcp-cwr Set the IPv4 CWR bit (0 or 1)\n"
" --ecn-tcp-ece Set the IPv4 ECE bit (0 or 1)\n",
- IPTABLES_VERSION, IPTABLES_VERSION
-);
-}
+#endif
+
static struct option opts[] = {
{ "ecn-tcp-remove", 0, 0, 'F' },
diff --git a/extensions/libipt_MARK.c b/extensions/libipt_MARK.c
index 9774d45..0863041 100644
--- a/extensions/libipt_MARK.c
+++ b/extensions/libipt_MARK.c
@@ -46,9 +46,9 @@
= (struct ipt_mark_target_info *)(*target)->data;
switch (c) {
- char *end;
case '1':
- if (string_to_number(optarg, 0, 0xfffff, &markinfo->mark))
+ if (string_to_number(optarg, 0, 0xffffffff,
+ (unsigned int *)&markinfo->mark))
exit_error(PARAMETER_PROBLEM, "Bad MARK value `%s'", optarg);
if (*flags)
exit_error(PARAMETER_PROBLEM,