All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Laurence J. Lane" <ljlane@nontoxic.org>
To: netfilter-devel@lists.netfilter.org
Subject: rules inserted with bad interface name
Date: Fri, 22 Nov 2002 19:12:30 -0500	[thread overview]
Message-ID: <20021123001230.GA23841@ns> (raw)

http://bugs.debian.org/170040

There appears to be an argument parsing bug in iptables, tested with
version 1.2.7a. If -i or -o is used without a space between the
interface and the option, iptables use the option as part of the
interface name. For example:

  iptables -A INPUT -ifoo

That actually appends the rule with the inbound interface 
literally named "-ifoo".

I also fond something else odd. The longopt forms of the interface
options give an error when used with an equal sign. For example:

  root@absolom:~# iptables --append=OUTPUT --out-interface=foo
  iptables v1.2.7a: interface name `--out-interface=foo' must be shorter
  than IFNAMSIZ (15)

That may actually be the same bug because iptables will accept
"--in-interface=" (which weighs in at exactly 15 characters) and 
make it the actual interface name.


Thanks.

             reply	other threads:[~2002-11-23  0:12 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2002-11-23  0:12 Laurence J. Lane [this message]
2002-11-23 14:49 ` rules inserted with bad interface name Michael Schwendt

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20021123001230.GA23841@ns \
    --to=ljlane@nontoxic.org \
    --cc=netfilter-devel@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.