Time match problem

Time match problem

[xubh0660]

Hi,
When I am using the time match ,I have the following command:

 iptables -A FORWARD -m time --timestart 08:00 --timestop 18:00 \
  --days Mon -j ACCEPT

This works well,but when i delete the rule,I have the following command:

 iptables -D FORWARD -m time --timestart 08:00 --timestop 18:00 \
  --days Mon -j ACCEPT

It does not work,and display:

 iptables: Bad rule (Does a matching rule exist in that chain?)

I change the FORWARD chain to INPUT chain or OUTPUT chain,it could work.
Does anyone help me? I'm RH 8.0 + iptables 1.2.8

best regards
  BenH



===================================================================

Re: Time match problem

[Fabrice MARIE]

Hello

> Hi,
> When I am using the time match ,I have the following command:
>  iptables -A FORWARD -m time --timestart 08:00 --timestop 18:00  --days
Mon -j ACCEPT
> This works well,but when i delete the rule,I have the following command:
>  iptables -D FORWARD -m time --timestart 08:00 --timestop 18:00  --days
Mon -j ACCEPT
> It does not work,and display:

I'm aware of the problem for quite some time, it's just that I need a bit of
time to fix it...
But I'll do it soon, I promise :)

Cheers,

Fabrice.
--
Fabrice MARIE

"Silly hacker, root is for administrators"
       -Unknown

Re: Time match problem

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 1136 bytes --]

On Thu, Jun 19, 2003 at 07:15:23PM +0800, Fabrice MARIE wrote:
> Hello
> 
> > Hi,
> > When I am using the time match ,I have the following command:
> >  iptables -A FORWARD -m time --timestart 08:00 --timestop 18:00  --days
> Mon -j ACCEPT
> > This works well,but when i delete the rule,I have the following command:
> >  iptables -D FORWARD -m time --timestart 08:00 --timestop 18:00  --days
> Mon -j ACCEPT
> > It does not work,and display:
> 
> I'm aware of the problem for quite some time, it's just that I need a bit of
> time to fix it...
> But I'll do it soon, I promise :)

Hi  Fabrice, could you please submit this to bugzilla so it doesn't get
lost (and people can discover that this is a known bug)?  Thanks.

> Cheers,
> Fabrice.

-- 
- Harald Welte <laforge@netfilter.org>             http://www.netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]