[Bug 639] New: iptables iprange

[bugzilla-daemon at bugzilla.netfilter.org]

http://bugzilla.netfilter.org/show_bug.cgi?id=639

           Summary: iptables iprange
           Product: iptables
           Version: unspecified
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: blocker
          Priority: P1
         Component: iptables
        AssignedTo: netfilter-buglog at lists.netfilter.org
        ReportedBy: paulo.santos at anacom.pt


Dear iptables Team,

I found that iprange match module extension in iptables might not be working in
1.4.7 version. 

I was using the following rule in 1.4.0: 
-A fwd-acl -d 192.168.1.2/32 -i eth1 -p tcp -m iprange --src-range
10.0.0.1-10.0.0.2 -m tcp --sport 1024:65535 --dport 8585 -m state --state NEW
-j ACCEPT

Now I upgrade to 1.4.7 and found that altough this rule is accepted without an
error, what is in fact taking place is (rules were reloaded with
iptables-restore):

-A fwd-acl -d 192.168.1.2/32 -i eth1 -p tcp -m iprange --src-range
0.0.0.0-0.0.0.0 -m tcp --sport 1024:65535 --dport 8585 -m state --state NEW -j
ACCEPT

Thanks in advance.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.