Hi Pablo, On Fri, Feb 14, 2020 at 10:00:24AM +0100, Pablo Neira Ayuso wrote: > On Thu, Feb 13, 2020 at 02:04:36PM +0100, Phil Sutter wrote: > > In legacy iptables, only the last plus sign remains special, any > > previous ones are taken literally. Therefore xtables-translate must not > > replace all of them with asterisk but just the last one. > > Interesting corner case. I'm merely fixing the bugs I introduced earlier - old code (prior to my initial fix for translating '+' as interface name) did it right, considering only the last character for wildcard substitution and leaving any earlier '+' chars in place. :) Cheers, Phil
