Adding a rule with invalid interface name

All of lore.kernel.org
 help / color / mirror / Atom feed

* Adding a rule with invalid interface name
@ 2004-09-16 12:34 Swapnil Nagle
  2004-09-16 15:42 ` Phil Oester
  0 siblings, 1 reply; 2+ messages in thread
From: Swapnil Nagle @ 2004-09-16 12:34 UTC (permalink / raw)
  To: netfilter-devel


iptables lets me add a rule with invalid interface name :

# iptables -A FORWARD -i abc -o xyz -j ACCEPT

This is the actual command. "abc" & "xyz" are not the obfuscated 
versions of some real interface names.

# iptables -L

Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

iptables version is 1.2.7a running on a stock RedHat 9 kernel (2.4.20-6)

Regards,
Swapnil.

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: Adding a rule with invalid interface name
  2004-09-16 12:34 Adding a rule with invalid interface name Swapnil Nagle
@ 2004-09-16 15:42 ` Phil Oester
  0 siblings, 0 replies; 2+ messages in thread
From: Phil Oester @ 2004-09-16 15:42 UTC (permalink / raw)
  To: Swapnil Nagle; +Cc: netfilter-devel

On Thu, Sep 16, 2004 at 06:04:24PM +0530, Swapnil Nagle wrote:
> 
> iptables lets me add a rule with invalid interface name :
> 
> # iptables -A FORWARD -i abc -o xyz -j ACCEPT

How is iptables supposed to know that you won't at some point down
the line bring up an interface called 'abc' or 'xyz'?  

Nothing invalid about iptables allowing you to add this rule...

Phil

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2004-09-16 15:42 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-09-16 12:34 Adding a rule with invalid interface name Swapnil Nagle
2004-09-16 15:42 ` Phil Oester

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.