On Wed, Mar 08, 2017 at 03:33:04PM +0100, Pablo Neira Ayuso wrote: > Originally reported as a iptables-translate problem, but this also > affects iptables and ip6tables. > > $ iptables-translate -A INPUT -s localhost -j ACCEPT > > gives duplicated rules: > > nft add rule ip filter INPUT ip saddr 127.0.0.1 counter accept > nft add rule ip filter INPUT ip saddr 127.0.0.1 counter accept > > This handling sucks, but libc seem to need if we have 127.0.0.1 and ::1 > entries in /etc/hosts that are common in many distros. > > For more info, see: > > https://sourceware.org/bugzilla/show_bug.cgi?id=4980 > https://bugzilla.redhat.com/show_bug.cgi?id=496300 > > Reported-by: Alexander Alemayhu <alexander@xxxxxxxxxxxx> > Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> Was going to test it, but it does not apply. Applying: libxtables: duplicated loopback address via host_to_ipaddr() error: patch failed: libxtables/xtables.c:1375 error: libxtables/xtables.c: patch does not apply Patch failed at 0001 libxtables: duplicated loopback address via host_to_ipaddr() The copy of the patch that failed is found in: .git/rebase-apply/patch When you have resolved this problem, run "git am --continue". If you prefer to skip this patch, run "git am --skip" instead. To restore the original branch and stop patching, run "git am --abort". -- Mit freundlichen Grüßen Alexander Alemayhu -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
