From: Peteris Krumins <newsgroups@lf.lv>
To: netfilter-devel@lists.netfilter.org
Subject: iptables icmp protocol match bug.
Date: Thu, 31 Jul 2003 22:47:10 +0300 [thread overview]
Message-ID: <54265908055.20030731224710@lf.lv> (raw)
Hello,
A quick bug report:
iptables -A INPUT -p icmp --icmp-type 255 -i lo -j REJECT
this rule also denies icmp ping and i think anything else of icmp.
Works for me at least on 2.4.22-pre6 and patch-o-matic-20030714
havent tried w/ newer versions.
Does not work on base 2.4.20 and iptables 1.2.7a
proof:
--
z@xor:/[1032]# iptables -A INPUT -p icmp --icmp-type 255 -i lo -j REJECT
z@xor:/[1033]# ping localhost -c 5
PING localhost (127.0.0.1): 56 octets data
--- localhost ping statistics ---
5 packets transmitted, 0 packets received, 100% packet loss
z@xor:/[1034]# iptables -D INPUT -p icmp --icmp-type 255 -i lo -j REJECT
z@xor:/[1035]# ping localhost -c 5
PING localhost (127.0.0.1): 56 octets data
64 octets from 127.0.0.1: icmp_seq=0 ttl=128 time=0.3 ms
64 octets from 127.0.0.1: icmp_seq=1 ttl=128 time=0.3 ms
^C
P.Krumins
netfilter-devel@lists.netfilter.org
next reply other threads:[~2003-07-31 19:47 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-07-31 19:47 Peteris Krumins [this message]
2003-07-31 21:52 ` iptables icmp protocol match bug Patrick McHardy
2003-07-31 22:17 ` Re[2]: " Peteris Krumins
2003-07-31 22:39 ` Patrick McHardy
2003-07-31 23:57 ` Henrik Nordstrom
2003-08-02 16:05 ` Harald Welte
2003-08-04 20:50 ` Patrick McHardy
-- strict thread matches above, loose matches on Subject: below --
2003-07-31 20:26 Peteris Krumins
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=54265908055.20030731224710@lf.lv \
--to=newsgroups@lf.lv \
--cc=netfilter-devel@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.