On Mon, Oct 08, 2012 at 01:17:06AM +0200, Pablo Neira Ayuso wrote: > On Mon, Oct 08, 2012 at 12:24:41AM +0200, Pablo Neira Ayuso wrote: > Hi! > > The Netfilter project proudly presents: > > iptables 1.4.16.1 > > This release fixes a major breakage introduced by: > > commit cd2f9bdbb7f9b737e5d640aafeb78bcd8e3a7adf > Author: Jan Engelhardt <jengelh@xxxxxxx> > Date: Tue Sep 4 05:24:47 2012 +0200 > > iptables: support for target aliases > > This is really unfortunate, it seems this patch has been pushed > mainstream without sufficient testing. We are really sorry for the > inconvenience. Please, don't use 1.4.16, this bug reders it > completely useless. > > See ChangeLog that comes attached to this email for more details. I got everything working back but the new target alias infrastructure while rushing to fix the breakage. The patch attached should get the target aliasing working. This is not serious though, the only target that can benefit from this is feature is NOTRACK, and it will be removed in the upcoming 3.7, ie. there is no kernel available that can benefit from this feature.
diff --git a/iptables/ip6tables.c b/iptables/ip6tables.c index faddb71..1683621 100644 --- a/iptables/ip6tables.c +++ b/iptables/ip6tables.c @@ -1286,7 +1286,7 @@ static void command_jump(struct iptables_command_state *cs) cs->target->t = xtables_calloc(1, size); cs->target->t->u.target_size = size; - if (cs->target->real_name != NULL) + if (strcmp(cs->target->real_name, "standard") == 0) strcpy(cs->target->t->u.user.name, cs->jumpto); else strcpy(cs->target->t->u.user.name, cs->target->real_name); diff --git a/iptables/iptables.c b/iptables/iptables.c index 96cea64..ae22ead 100644 --- a/iptables/iptables.c +++ b/iptables/iptables.c @@ -1295,7 +1295,7 @@ static void command_jump(struct iptables_command_state *cs) cs->target->t = xtables_calloc(1, size); cs->target->t->u.target_size = size; - if (cs->target->real_name != NULL) + if (strcmp(cs->target->real_name, "standard") == 0) strcpy(cs->target->t->u.user.name, cs->jumpto); else strcpy(cs->target->t->u.user.name, cs->target->real_name);
