was there a syntax rule change regarding the use of '!'

was there a syntax rule change regarding the use of '!'

[Elvar]

Hello,

I just deployed by first Ubuntu 12.04 install and I was seeing errors in 
my typical iptables script. I found that I had to change the order of 
where I placed my '!' in the rule. For example...

OLD -> iptables -A FORWARD -i eth1 -s ! 192.168.42.0/24 -j DROP
NEW -> iptables -A FORWARD -i eth1 ! -s 192.168.42.0/24 -j DROP


I don't see anything about this in the changelog so I was just wondering 
if anyone else has seen this as well.

Thanks,
Elvar

Re: was there a syntax rule change regarding the use of '!'

[Neal Murphy]

On Wednesday, August 29, 2012 12:08:08 PM Elvar wrote:
> Hello,
> 
> I just deployed by first Ubuntu 12.04 install and I was seeing errors in
> my typical iptables script. I found that I had to change the order of
> where I placed my '!' in the rule. For example...
> 
> OLD -> iptables -A FORWARD -i eth1 -s ! 192.168.42.0/24 -j DROP
> NEW -> iptables -A FORWARD -i eth1 ! -s 192.168.42.0/24 -j DROP
> 
> 
> I don't see anything about this in the changelog so I was just wondering
> if anyone else has seen this as well.

A little hard to find. But yes, this changed a little while ago to 'prefix' 
only (! -opt value); 'infix' (-opt ! value) is no longer valid.

Re: was there a syntax rule change regarding the use of '!'

[Jan Engelhardt]

On Wednesday 2012-08-29 18:08, Elvar wrote:
>
> I just deployed by first Ubuntu 12.04 install and I was seeing errors in my
> typical iptables script. I found that I had to change the order of where I
> placed my '!' in the rule. For example...
>
> OLD -> iptables -A FORWARD -i eth1 -s ! 192.168.42.0/24 -j DROP
> NEW -> iptables -A FORWARD -i eth1 ! -s 192.168.42.0/24 -j DROP
>
> I don't see anything about this in the changelog so I was just wondering if
> anyone else has seen this as well.

A long time ago in a galaxy far, far away....


commit 0f16c725aadaac7e670d632ecbaea3661ff00827 (v1.4.3~46^2~3)
Author: Jan Engelhardt <jengelh@medozas.de>
Date:   Fri Jan 30 04:55:38 2009 +0100

    libxtables: prefix/order - move check_inverse to xtables.c

    This also adds a warning that intrapositional negation support
    is deprecated.

    Signed-off-by: Jan Engelhardt <jengelh@medozas.de>

Re: was there a syntax rule change regarding the use of '!'

[Elvar]

On 8/29/2012 1:49 PM, Jan Engelhardt wrote:
> On Wednesday 2012-08-29 18:08, Elvar wrote:
>> I just deployed by first Ubuntu 12.04 install and I was seeing errors in my
>> typical iptables script. I found that I had to change the order of where I
>> placed my '!' in the rule. For example...
>>
>> OLD -> iptables -A FORWARD -i eth1 -s ! 192.168.42.0/24 -j DROP
>> NEW -> iptables -A FORWARD -i eth1 ! -s 192.168.42.0/24 -j DROP
>>
>> I don't see anything about this in the changelog so I was just wondering if
>> anyone else has seen this as well.
> A long time ago in a galaxy far, far away....
>
>
> commit 0f16c725aadaac7e670d632ecbaea3661ff00827 (v1.4.3~46^2~3)
> Author: Jan Engelhardt <jengelh@medozas.de>
> Date:   Fri Jan 30 04:55:38 2009 +0100
>
>      libxtables: prefix/order - move check_inverse to xtables.c
>
>      This also adds a warning that intrapositional negation support
>      is deprecated.
>
>      Signed-off-by: Jan Engelhardt <jengelh@medozas.de>

Thanks! :)