Blame SOURCES/0038-fix-nftables-do-not-log-icmp-block-if-inversion.patch

343241
From de28755c4e14224f6303c864327fffe7d2639268 Mon Sep 17 00:00:00 2001
343241
From: Eric Garver <eric@garver.life>
343241
Date: Mon, 13 Sep 2021 15:45:53 -0400
343241
Subject: [PATCH 38/50] fix(nftables): do not log icmp block if inversion
343241
343241
Fixes: #696
343241
Fixes: rhbz1945833
343241
(cherry picked from commit 50a5ed2d0fa6169c6780488dae931a3b4fce47ab)
343241
(cherry picked from commit a451b033200b289c6fac823f7dce23c37a38a3d1)
343241
---
343241
 src/firewall/core/nftables.py | 2 +-
343241
 1 file changed, 1 insertion(+), 1 deletion(-)
343241
343241
diff --git a/src/firewall/core/nftables.py b/src/firewall/core/nftables.py
343241
index e3ae988bbdab..29a9a2492032 100644
343241
--- a/src/firewall/core/nftables.py
343241
+++ b/src/firewall/core/nftables.py
343241
@@ -1601,7 +1601,7 @@ class nftables(object):
343241
                     rule.update(self._rich_rule_priority_fragment(rich_rule))
343241
                     rules.append({add_del: {"rule": rule}})
343241
             else:
343241
-                if self._fw.get_log_denied() != "off" and self._fw.policy.query_icmp_block_inversion(policy):
343241
+                if self._fw.get_log_denied() != "off" and not self._fw.policy.query_icmp_block_inversion(policy):
343241
                     rules.append({add_del: {"rule": {"family": "inet",
343241
                                                      "table": TABLE_NAME,
343241
                                                      "chain": final_chain,
343241
-- 
343241
2.27.0
343241