Mark default rule with IPFW_RULE_NOOPT flag, so it can be showed in

compact form.

MFC after:	1 week
This commit is contained in:
Andrey V. Elsukov 2019-06-25 09:11:22 +00:00
parent 55507128b9
commit 7d4b2d5244
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=349365

View File

@ -3364,6 +3364,7 @@ vnet_ipfw_init(const void *unused)
/* fill and insert the default rule */
rule = ipfw_alloc_rule(chain, sizeof(struct ip_fw));
rule->flags |= IPFW_RULE_NOOPT;
rule->cmd_len = 1;
rule->cmd[0].len = 1;
rule->cmd[0].opcode = default_to_accept ? O_ACCEPT : O_DENY;