commit 6350323ad8def2ac00d77cdee3b79c9b9fba75c4
author David S. Miller <davem@davemloft.net> Fri Dec 23 14:29:20 2011 -0500
committer David S. Miller <davem@davemloft.net> Fri Dec 23 14:29:20 2011 -0500
tree 299b12c2335e9bf59b3e35c0eb098c1734ba92e1
parent 0fd7bac6b6157eed6cf0cb86a1e88ba29e57c033
parent 0354b48f633ae435acbc01b470a1ce8cfeff3e9f

Merge branch 'nf' of git://1984.lsi.us.es/net

net/netfilter/xt_connbytes.c

diff --git a/net/netfilter/xt_connbytes.c b/net/netfilter/xt_connbytes.c
index 5b13850..9ddf1c3 100644
--- a/net/netfilter/xt_connbytes.c
+++ b/net/netfilter/xt_connbytes.c
@@ -87,10 +87,10 @@
 		break;
 	}
 
-	if (sinfo->count.to)
+	if (sinfo->count.to >= sinfo->count.from)
 		return what <= sinfo->count.to && what >= sinfo->count.from;
-	else
-		return what >= sinfo->count.from;
+	else /* inverted */
+		return what < sinfo->count.to || what > sinfo->count.from;
 }
 
 static int connbytes_mt_check(const struct xt_mtchk_param *par)