From: "Laurence J. Lane" <ljlane@nontoxic.org>
To: netfilter-devel@lists.netfilter.org
Subject: rules inserted with bad interface name
Date: Fri, 22 Nov 2002 19:12:30 -0500 [thread overview]
Message-ID: <20021123001230.GA23841@ns> (raw)
http://bugs.debian.org/170040
There appears to be an argument parsing bug in iptables, tested with
version 1.2.7a. If -i or -o is used without a space between the
interface and the option, iptables use the option as part of the
interface name. For example:
iptables -A INPUT -ifoo
That actually appends the rule with the inbound interface
literally named "-ifoo".
I also fond something else odd. The longopt forms of the interface
options give an error when used with an equal sign. For example:
root@absolom:~# iptables --append=OUTPUT --out-interface=foo
iptables v1.2.7a: interface name `--out-interface=foo' must be shorter
than IFNAMSIZ (15)
That may actually be the same bug because iptables will accept
"--in-interface=" (which weighs in at exactly 15 characters) and
make it the actual interface name.
Thanks.
next reply other threads:[~2002-11-23 0:12 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-11-23 0:12 Laurence J. Lane [this message]
2002-11-23 14:49 ` rules inserted with bad interface name Michael Schwendt
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20021123001230.GA23841@ns \
--to=ljlane@nontoxic.org \
--cc=netfilter-devel@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.