| commit | 84ba7dd71add05b52e55c60b4a3af9bb6194c73d | [log] [tgz] |
|---|---|---|
| author | Florian Westphal <fw@strlen.de> | Fri Dec 08 17:01:55 2017 +0100 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Mon Jan 08 18:01:14 2018 +0100 |
| tree | 2ce13364a97e60958169bc966862215912317f07 | |
| parent | f92b40a8b2645af38bd6814651c59c1e690db53d [diff] |
netfilter: nf_tables: reject nat hook registration if prio is before conntrack No problem for iptables as priorities are fixed values defined in the nat modules, but in nftables the priority its coming from userspace. Reject in case we see that such a hook would not work. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>