From: Patrick Schaaf <netdev@bof.de>
To: netfilter-devel <netfilter-devel@vger.kernel.org>
Subject: Funny iptables -L output with 0.0.0.3 netmask
Date: Thu, 22 Jan 2015 12:14:08 +0100 [thread overview]
Message-ID: <5101724.aeQA8Siq95@rofl> (raw)
Hi,
just noticed something funny with "iptables -L" - was always fine in the past,
e.g. with iptables 1.4.10, but now on a box with iptables 1.4.19 (opensuse
13.1) I see a funny thing.
Rule:
iptables -A somewhere -s 0.0.0.1/0.0.0.3 -j ACCEPT
Previous / normal list output:
ACCEPT all -- 0.0.0.1/0.0.0.3 anywhere
Funny output I see now:
ACCEPT all -- 0.0.0.1/-1 anywhere
The "-1" shows for variations of the nifty mask, too, e.g. /0.0.0.1 or
/0.0.0.5 or even /127.255.255.255 - apparently anything with a leading 0-bit.
iptables-save output is fine.
Sorry if this is known + maybe already fixed in newer iptables versions...
best regards
Patrick
next reply other threads:[~2015-01-22 11:14 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-01-22 11:14 Patrick Schaaf [this message]
2015-01-22 12:31 ` Funny iptables -L output with 0.0.0.3 netmask Jan Engelhardt
2015-01-22 13:21 ` Patrick Schaaf
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5101724.aeQA8Siq95@rofl \
--to=netdev@bof.de \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).