netfilter: ip6t_{hbh,dst}: Rejects not-strict mode on rule insertion

[linux-kernel-docs/linux-2.4.36.git] / net / ipv6 / netfilter / ip6t_dst.c

diff --git a/net/ipv6/netfilter/ip6t_dst.c b/net/ipv6/netfilter/ip6t_dst.c
index 65213e9..70b7f89 100644 (file)
--- a/net/ipv6/netfilter/ip6t_dst.c
+++ b/net/ipv6/netfilter/ip6t_dst.c
@@ -172,8 +172,6 @@ match(const struct sk_buff *skb,
        hdrlen -= 2;
        if ( !(optinfo->flags & IP6T_OPTS_OPTS) ){
               return ret;
-       } else if (optinfo->flags & IP6T_OPTS_NSTRICT) {
-               DEBUGP("Not strict - not implemented");
        } else {
                DEBUGP("Strict ");
                DEBUGP("#%d ",optinfo->optsnr);
@@ -253,6 +251,10 @@ checkentry(const char *tablename,
                       optsinfo->invflags);
               return 0;
        }
+       if (optsinfo->flags & IP6T_OPTS_NSTRICT) {
+              DEBUGP("ip6t_opts: Not strict - not implemented");
+              return 0;
+       }
 
        return 1;
 }