[Bug 562] Rule gets implicitly eliminated ("optimized away") --> But that's not ok --> A Logic Bug

bugzilla-daemon at bugzilla.netfilter.org bugzilla-daemon at bugzilla.netfilter.org
Tue Nov 25 19:49:59 CET 2008


http://bugzilla.netfilter.org/show_bug.cgi?id=562


kernel at linuxace.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|REOPENED                    |RESOLVED
         Resolution|                            |INVALID




------- Comment #3 from kernel at linuxace.com  2008-11-25 19:49 -------
This does not work:

> /sbin/iptables -A INPUT --dport 8191 --match recent --name WATCHLIST --set -j
DROP

because IT IS NOT A VALID RULE!!!  You CANNOT have a rule which includes a
"--dport" without ALSO specifying a protocol.  

Please read the iptables documentation on this, and do not reopen this bug.  It
is NOT a bug in the code, but a bug in your understanding of how to create
rules.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the netfilter-buglog mailing list