* iptables upgrade: netmask parsing trouble
@ 2013-05-08 8:17 Thomas Jarosch
2013-05-08 13:10 ` Pablo Neira Ayuso
0 siblings, 1 reply; 3+ messages in thread
From: Thomas Jarosch @ 2013-05-08 8:17 UTC (permalink / raw)
To: netfilter-devel
Hi,
I've just updated from iptables 1.4.8 to 1.4.18 (git HEAD to be precise)
and now face some trouble with netmask parsing:
This used to work with 1.4.8:
-A foo -m policy --mode tunnel --dir in --tunnel-src 192.168.123.0/255.255.255.0 -j RETURN
With git HEAD I get:
iptables-restore v1.4.18: policy: bad value for option "--tunnel-src", or out of range (0-32)
This of course works:
-A foo -m policy --mode tunnel --dir in --tunnel-src 192.168.123.0/24 -j RETURN
Any reason why we don't accept the full format anymore?
Cheers,
Thomas
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: iptables upgrade: netmask parsing trouble
2013-05-08 8:17 iptables upgrade: netmask parsing trouble Thomas Jarosch
@ 2013-05-08 13:10 ` Pablo Neira Ayuso
2013-05-08 15:01 ` Thomas Jarosch
0 siblings, 1 reply; 3+ messages in thread
From: Pablo Neira Ayuso @ 2013-05-08 13:10 UTC (permalink / raw)
To: Thomas Jarosch; +Cc: netfilter-devel
On Wed, May 08, 2013 at 10:17:59AM +0200, Thomas Jarosch wrote:
> Hi,
>
> I've just updated from iptables 1.4.8 to 1.4.18 (git HEAD to be precise)
> and now face some trouble with netmask parsing:
>
> This used to work with 1.4.8:
> -A foo -m policy --mode tunnel --dir in --tunnel-src 192.168.123.0/255.255.255.0 -j RETURN
>
> With git HEAD I get:
> iptables-restore v1.4.18: policy: bad value for option "--tunnel-src", or out of range (0-32)
>
>
> This of course works:
> -A foo -m policy --mode tunnel --dir in --tunnel-src 192.168.123.0/24 -j RETURN
>
> Any reason why we don't accept the full format anymore?
No. Things that used to work have to work indeed. Just sent a patch to
fix it.
Thanks for the report Thomas.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: iptables upgrade: netmask parsing trouble
2013-05-08 13:10 ` Pablo Neira Ayuso
@ 2013-05-08 15:01 ` Thomas Jarosch
0 siblings, 0 replies; 3+ messages in thread
From: Thomas Jarosch @ 2013-05-08 15:01 UTC (permalink / raw)
To: Pablo Neira Ayuso; +Cc: netfilter-devel
On Wednesday, 8. May 2013 15:10:16 you wrote:
> > Any reason why we don't accept the full format anymore?
>
> No. Things that used to work have to work indeed. Just sent a patch to
> fix it.
patch seems to work fine (=loads the firewall again).
Thanks for the quick fix.
Thomas
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2013-05-08 15:01 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-05-08 8:17 iptables upgrade: netmask parsing trouble Thomas Jarosch
2013-05-08 13:10 ` Pablo Neira Ayuso
2013-05-08 15:01 ` Thomas Jarosch
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).