Re: [iptables PATCH 2/2] Revert "ebtables: use extrapositioned negation consistently"

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Phil Sutter <phil@xxxxxx> wrote:
> This reverts commit 5f508b76a0cebaf91965ffa678089222e2d47964.
> 
> While attempts at unifying syntax between arp-, eb- and iptables-nft
> increase the opportunity for more code-sharing, they are problematic
> when it comes to compatibility. Accepting the old syntax on input helps,
> but due to the fact that neither arptables nor ebtables support --check
> command we must expect for users to test existence of a rule by
> comparing input with output. If that happens in a script, deviating from
> the old syntax in output has a high chance of breaking it.

Is there a known script that is affected?

We broke this in iptables in even worse way, as we even do not support
-i ! "foo" anymore (you get a syntax error).

Do you think adding a warning on -i ! "foo" would help?

The many syntax deviations between the flavours is not nice at all,
making this more consistent would be a nice thing imo.



[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux