table ip filter { ct timeout agressive-tcp { protocol tcp; ^--- remove this semicolon
Not needed, remove it. Fixes: c7c94802679c ("src: add ct timeout support") Signed-off-by: Pablo Neira Ayuso <pa...@netfilter.org> --- src/rule.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/rule.c b/src/rule.c index 048a7fb4c92c..6dbc553e6c33 100644 --- a/src/rule.c +++ b/src/rule.c @@ -1834,7 +1834,7 @@ static void obj_print_data(const struct obj *obj, nft_print(octx, "%s", opts->nl); nft_print(octx, "%s%sprotocol ", opts->tab, opts->tab); print_proto_name_proto(obj->ct_timeout.l4proto, octx); - nft_print(octx, ";%s", opts->nl); + nft_print(octx, "%s", opts->nl); nft_print(octx, "%s%sl3proto %s%s", opts->tab, opts->tab, family2str(obj->ct_timeout.l3proto), -- 2.11.0