Message ID | 1410453949-6647-1-git-send-email-pablo@netfilter.org |
---|---|
State | Accepted |
Delegated to: | Pablo Neira |
Headers | show |
diff --git a/src/netlink_linearize.c b/src/netlink_linearize.c index 5eecd79..17375a5 100644 --- a/src/netlink_linearize.c +++ b/src/netlink_linearize.c @@ -586,7 +586,10 @@ static void netlink_gen_log_stmt(struct netlink_linearize_ctx *ctx, nft_rule_expr_set_u16(nle, NFT_EXPR_LOG_QTHRESHOLD, stmt->log.qthreshold); } else { - nft_rule_expr_set_u32(nle, NFT_EXPR_LOG_LEVEL, stmt->log.level); + if (stmt->log.flags & STMT_LOG_LEVEL) { + nft_rule_expr_set_u32(nle, NFT_EXPR_LOG_LEVEL, + stmt->log.level); + } } nft_rule_add_expr(ctx->nlr, nle); }
The kernel will default on LOG_WARNING, to mimic iptables behaviour. Reported-by: Ana Rey <anarey@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> --- src/netlink_linearize.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-)