On Saturday 2009-11-14 10:25, Werner Pawlitschko wrote: > iptables -A OUPUT -j LOG -d 10.11.12.13 > then iptables-save shows > -A OUPUT -d 10.11.12.13/32 -j LOG > that's ok. > Then doing: > iptables -R OUTPUT 1 -j LOG -d 10.11.12.13 > then iptables-save shows > -A OUTPUT -d 10.11.12.13/0 -j LOG > Looks bad. As you see the mask is set to zero for all bits. It turns out -R always put /0 in there. A bug of course, that I fixed now. Patch at git://dev.medozas.de/iptables for the wary, otherwise will be submitted in my semiregular pushes. thanks, Jan -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html