From mboxrd@z Thu Jan 1 00:00:00 1970 From: Florian Westphal Subject: [PATCH 1/1] libxt_time: fix random --datestart skips Date: Wed, 24 Nov 2010 17:42:15 +0100 Message-ID: <1290616935-18291-1-git-send-email-fwestphal@astaro.com> Cc: Florian Westphal To: netfilter-devel@vger.kernel.org Return-path: Received: from Chamillionaire.breakpoint.cc ([85.10.199.196]:35318 "EHLO Chamillionaire.breakpoint.cc" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752558Ab0KXQqx (ORCPT ); Wed, 24 Nov 2010 11:46:53 -0500 Sender: netfilter-devel-owner@vger.kernel.org List-ID: Frank Lichtenheld points out that -m time --datestart ... sometimes messes up --datestart: $ iptables -A INPUT -m time --datestart 2010-11-24T16:50:00 -j ACCEPT $ iptables-save | grep 11 -A INPUT -m time --datestart 2010-11-24T16:50:00 -j ACCEPT $ iptables-save | iptables-restore $ iptables-save | grep 11 -A INPUT -m time --datestart 2010-11-24T15:50:00 -j ACCEPT --datestart moved by one hour. As the --timestart option does not care about DST, always set dst=0 when parsing --starttime input. Reported-by: Frank Lichtenheld Signed-off-by: Florian Westphal --- extensions/libxt_time.c | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/extensions/libxt_time.c b/extensions/libxt_time.c index 9f12266..055e716 100644 --- a/extensions/libxt_time.c +++ b/extensions/libxt_time.c @@ -138,6 +138,7 @@ static time_t time_parse_date(const char *s, bool end) tm.tm_hour = hour; tm.tm_min = minute; tm.tm_sec = second; + tm.tm_isdst = 0; ret = mktime(&tm); if (ret >= 0) return ret; -- 1.7.2.2