Re: ipset bitmap:port question

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 14 Nov 2019, Kadlecsik József wrote:

> On Thu, 14 Nov 2019, A L wrote:
> 
> > I'm trying to understand if ipset "bitmap:port" should support protocol 
> > or not. Based on the name"bitmap:port" it should only store one value 
> > per row, and not tuple like "bitmap:ip,mac" does. However the examples 
> > in the manual suggests it should?
> 
> It's a documentation bug, bitmap:port type does not support protocol. 
> I'm going to fix the documentation, both in the help and the manpage.

Checking the manpage it reads

bitmap:port
 ....
 ADD-ENTRY := { [proto:]port | [proto:]fromport-toport }
 ....
 proto only needs to be specified if a service name is used, and  that  
 name does not exist as a TCP service.

So you can type "ipset add foo udp:rlp" instead of "ipset add foo 39" - 
it's only a helper to avoid writing numbers.

The manpage does not claim that protocol is stored, but then it's best to 
explicitly state so in the documentation.

Best regards,
Jozsef
-
E-mail  : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics
          H-1525 Budapest 114, POB. 49, Hungary

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux