Re: iptables: considers incomplete rule in -C and finds an erroneous match

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 5 Feb 2024 04:45:19 +0500
Roman Mamedov <rm@xxxxxxxxxxx> wrote:

>   # ip6tables-save | grep 80,443
>   -A INPUT -s fd39::/16 -p tcp -m multiport --dports 80,443 -j ACCEPT

Actually the 2nd rule doesn't matter at all, it just returns success (rule
exists) on anything.

  # ip6tables -C INPUT -p udp --dport 12345 -j ACCEPT && echo Exists
  Exists

  # ip6tables-save | grep 12345
  #

-- 
With respect,
Roman




[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux