iptables (nf_tables) error when negating an interface and using protocol port - works fine with classic iptables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi, I tried iptables 1.8 with the new nf_tables back-end using the
Debian 1.8.0-1~exp1 package with my firewall script.

It seems to properly load most rules, however I am getting an error
when negating an interface and using protocol ports, which works fine
with classic iptables.

Specifically these work OK:
# iptables -A INPUT ! -i eth0 -p udp -j ACCEPT
# iptables -A INPUT -i eth0 -p udp --dport 5202 -j ACCEPT

But when using an interface negation with --sport or --dport it
reports an error, here is an example:
# iptables -A INPUT ! -i eth0 -p udp --dport 5202 -j ACCEPT
iptables v1.8.0 (nf_tables):  RULE_APPEND failed (Invalid argument):
rule in chain INPUT

Thank you.



[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux