BUG? iptables --datestop inconsistent behaviour

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Following script results in inconsistent behaviour of
iptables-save/iptables-restore. Value of --datestop is sometimes moved
back and sometimes not.

System is dual quadcore Nehalem with Gentoo 2.6.31-r6, timezone is set
to Europe/Prague:

router ~ # uname -a
Linux router 2.6.31-gentoo-r6 #1 SMP Wed Jan 6 10:50:58 CET 2010
x86_64 Intel(R) Xeon(R) CPU E5520 @ 2.27GHz GenuineIntel GNU/Linux

router ~ # emerge -s iptables | grep installed
      Latest version installed: 1.4.3.2

Repeatedly running following script:

********************************************************************
#!/bin/bash
iptables -t mangle -F POSTROUTING
iptables -t mangle -A POSTROUTING --destination 1.1.1.1 -m time
--datestop 2038-01-01T01:01:01 -j ACCEPT
iptables -t mangle -L -v | grep date
********************************************************************

gives randomly two different outputs:

    0     0 ACCEPT     all  --  any    any     anywhere
1.1.1.1             TIME until date 2038-01-01 00:01:01
or
    0     0 ACCEPT     all  --  any    any     anywhere
1.1.1.1             TIME until date 2038-01-01 01:01:01

Expected result should be the second one, because --localtz is
default. Even specifying --localtz or --utc explicitly doesnt help and
results are still randomly changing from run to run.
Double checked that /etc/localtime is copy of /usr/share/zoneinfo/Europe/Prague.

Upgrading to masked iptables-1.4.6 doesnt help too, same bahaviour.

Anyone has any idea ?

Karel Rericha
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux