VServer 1.9.2 (patch-2.6.8.1-vs1.9.2.diff)

[linux-2.6.git] / net / ipv4 / netfilter / ipt_CLASSIFY.c

diff --git a/net/ipv4/netfilter/ipt_CLASSIFY.c b/net/ipv4/netfilter/ipt_CLASSIFY.c
index e7b3004..9842e6e 100644 (file)
--- a/net/ipv4/netfilter/ipt_CLASSIFY.c
+++ b/net/ipv4/netfilter/ipt_CLASSIFY.c
@@ -54,15 +54,17 @@ checkentry(const char *tablename,
                return 0;
        }
        
-       if (hook_mask & ~(1 << NF_IP_POST_ROUTING)) {
-               printk(KERN_ERR "CLASSIFY: only valid in POST_ROUTING.\n");
+       if (hook_mask & ~((1 << NF_IP_LOCAL_OUT) | (1 << NF_IP_FORWARD) |
+                         (1 << NF_IP_POST_ROUTING))) {
+               printk(KERN_ERR "CLASSIFY: only valid in LOCAL_OUT, FORWARD "
+                               "and POST_ROUTING.\n");
                return 0;
        }
 
        if (strcmp(tablename, "mangle") != 0) {
-               printk(KERN_WARNING "CLASSIFY: can only be called from "
-                                   "\"mangle\" table, not \"%s\".\n",
-                                   tablename);
+               printk(KERN_ERR "CLASSIFY: can only be called from "
+                               "\"mangle\" table, not \"%s\".\n",
+                               tablename);
                return 0;
        }