- allow -j CLASSIFY to be called from the mangle or vnet tables

diff --git a/net/ipv4/netfilter/ipt_CLASSIFY.c b/net/ipv4/netfilter/ipt_CLASSIFY.c
index 9842e6e..e56b45f 100644 (file)
--- a/net/ipv4/netfilter/ipt_CLASSIFY.c
+++ b/net/ipv4/netfilter/ipt_CLASSIFY.c
@@ -62,10 +62,16 @@ checkentry(const char *tablename,
        }
 
        if (strcmp(tablename, "mangle") != 0) {
+#if defined(CONFIG_VNET) || defined(CONFIG_VNET_MODULE)
+       if (strcmp(tablename, "vnet") != 0) {
+#endif
                printk(KERN_ERR "CLASSIFY: can only be called from "
                                "\"mangle\" table, not \"%s\".\n",
                                tablename);
                return 0;
+#if defined(CONFIG_VNET) || defined(CONFIG_VNET_MODULE)
+       }
+#endif
        }
 
        return 1;