[Devel] [PATCH 07/14] net: ve: Add ipv6 bits into VE_IP_DEFAULT

Kirill Tkhai ktkhai at odin.com
Mon Jun 8 07:21:28 PDT 2015


@khorenko:
We never differed ipv4 and ipv6 in the iptables mask =>
let's put the ipv6 bits into kernel default mask.

Signed-off-by: Kirill Tkhai <ktkhai at odin.com>
---
 include/uapi/linux/vziptable_defs.h |    3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/include/uapi/linux/vziptable_defs.h b/include/uapi/linux/vziptable_defs.h
index 4ac920a..2b304a3 100644
--- a/include/uapi/linux/vziptable_defs.h
+++ b/include/uapi/linux/vziptable_defs.h
@@ -63,7 +63,8 @@ enum ve_ipt_mods {
 #define VE_IP_IPTABLE_NAT	(VE_IP_IPTABLE_NAT_MOD | VE_IP_CONNTRACK)
 
 /* safe iptables mask to be used by default */
-#define VE_IP_DEFAULT		(VE_IP_IPTABLES | VE_IP_FILTER | VE_IP_MANGLE)
+#define VE_IP_DEFAULT		(VE_IP_IPTABLES | VE_IP_FILTER | VE_IP_MANGLE | \
+				 VE_IP_IPTABLES6 | VE_IP_FILTER6 | VE_IP_MANGLE6)
 
 #define VE_IP_NONE		(0ull)
 #define VE_IP_ALL		(~VE_IP_NONE)




More information about the Devel mailing list