arptables -D fails most of the time, as we compared
source mask with target mask.

Signed-off-by: Florian Westphal <f...@strlen.de>
---
 iptables/nft-arp.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/iptables/nft-arp.c b/iptables/nft-arp.c
index f9352297d83b..675f0eb9daa6 100644
--- a/iptables/nft-arp.c
+++ b/iptables/nft-arp.c
@@ -637,7 +637,8 @@ static bool nft_arp_is_same(const void *data_a,
 
        if (a->arp.src.s_addr != b->arp.src.s_addr
            || a->arp.tgt.s_addr != b->arp.tgt.s_addr
-           || a->arp.smsk.s_addr != b->arp.tmsk.s_addr
+           || a->arp.smsk.s_addr != b->arp.smsk.s_addr
+           || a->arp.tmsk.s_addr != b->arp.tmsk.s_addr
            || a->arp.arpro != b->arp.arpro
            || a->arp.flags != b->arp.flags
            || a->arp.invflags != b->arp.invflags) {
-- 
2.18.1

Reply via email to