nwfilter: fix typing error in filter

Fix a typing error in the no-ip-spoofing filter.
Return DHCP request packets passing through this filter. Have
the user use another filter to actually allow DHCP requests to be
sent (action='accept').

diff --git a/examples/xml/nwfilter/no-ip-spoofing.xml b/examples/xml/nwfilter/no-ip-spoofing.xml
index cbed03083d5f4d338259e82d739b50952ad3c966..f8c95733320bff52ca5d7b3e4d4dcff13a379179 100644 (file)
--- a/examples/xml/nwfilter/no-ip-spoofing.xml
+++ b/examples/xml/nwfilter/no-ip-spoofing.xml
@@ -1,7 +1,7 @@
 <filter name='no-ip-spoofing' chain='ipv4-ip' priority='-710'>
-  <!-- allow DHCP requests -->
-  <rule action='accept' direction='out' priority='100'>
-    <ip srcipaddr='0.0.0.0' protocol='udp' srcportstart='68' srcportend='68'/>
+  <!-- allow UDP sent from 0.0.0.0 (DHCP); filter more exact later -->
+  <rule action='return' direction='out' priority='100'>
+    <ip srcipaddr='0.0.0.0' protocol='udp'/>
   </rule>
 
   <!-- allow all known IP addresses -->