[Bug 1303] nft improperly merges intervals

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Tue Nov 27 13:51:39 CET 2018


https://bugzilla.netfilter.org/show_bug.cgi?id=1303

--- Comment #2 from trever at middleearth.sapphiresunday.org ---
I am sorry for not being clear. The following command created the first rule
listed in my first description of the bug:

nft add rule ip nat postrouting oifname "ppp0" ip saddr { 10.1.1.0/25,
10.0.1.0/24, 10.0.0.0/24, 10.1.1.128/25 } counter masquerade


Again, the first and last entries are merged correctly as the second
(10.1.1.0/24). However, the second and third do NOT correctly merge as
10.0.0.0/23, this assumes 10.0.2-255.x are in the rule as well. The other rules
were simply there for illustration. I am aware they would be masked by the
first.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20181127/117c68bb/attachment.html>


More information about the netfilter-buglog mailing list