| commit | c0e69db337540b22a3b3f739b1143341e7b759b7 | [log] [tgz] |
|---|---|---|
| author | Jan Engelhardt <jengelh@medozas.de> | Sat Jul 09 16:01:18 2011 +0200 |
| committer | Jan Engelhardt <jengelh@medozas.de> | Sat Jul 09 16:01:18 2011 +0200 |
| tree | 6ca05679d2a30d5e978e1cfdd28ba11bca297758 | |
| parent | 32cea83f26a2c342b9410e6dfb0530b33f8af928 [diff] |
libxtables: properly reject empty hostnames An empty hostname in the address list of an -s/-d argument, which may be the result of a typo, is interpreted as 0/0, which, when combined with -j ACCEPT, leads to an undesired opening of the firewall. References: http://bugzilla.netfilter.org/show_bug.cgi?id=727 Signed-off-by: Jan Engelhardt <jengelh@medozas.de>