aboutsummaryrefslogtreecommitdiffstats
path: root/net/ipv4/netfilter/ipt_REJECT.c
diff options
context:
space:
mode:
Diffstat (limited to 'net/ipv4/netfilter/ipt_REJECT.c')
-rw-r--r--net/ipv4/netfilter/ipt_REJECT.c6
1 files changed, 3 insertions, 3 deletions
diff --git a/net/ipv4/netfilter/ipt_REJECT.c b/net/ipv4/netfilter/ipt_REJECT.c
index cf76f1bc3f1..b026014e7a5 100644
--- a/net/ipv4/netfilter/ipt_REJECT.c
+++ b/net/ipv4/netfilter/ipt_REJECT.c
@@ -181,16 +181,16 @@ static int reject_tg_check(const struct xt_tgchk_param *par)
181 181
182 if (rejinfo->with == IPT_ICMP_ECHOREPLY) { 182 if (rejinfo->with == IPT_ICMP_ECHOREPLY) {
183 pr_info("ECHOREPLY no longer supported.\n"); 183 pr_info("ECHOREPLY no longer supported.\n");
184 return false; 184 return -EINVAL;
185 } else if (rejinfo->with == IPT_TCP_RESET) { 185 } else if (rejinfo->with == IPT_TCP_RESET) {
186 /* Must specify that it's a TCP packet */ 186 /* Must specify that it's a TCP packet */
187 if (e->ip.proto != IPPROTO_TCP || 187 if (e->ip.proto != IPPROTO_TCP ||
188 (e->ip.invflags & XT_INV_PROTO)) { 188 (e->ip.invflags & XT_INV_PROTO)) {
189 pr_info("TCP_RESET invalid for non-tcp\n"); 189 pr_info("TCP_RESET invalid for non-tcp\n");
190 return false; 190 return -EINVAL;
191 } 191 }
192 } 192 }
193 return true; 193 return 0;
194} 194}
195 195
196static struct xt_target reject_tg_reg __read_mostly = { 196static struct xt_target reject_tg_reg __read_mostly = {