[Bug 97] New: iptables-restore can't load negated module parameter written by same version iptables-save

bugzilla-daemon@netfilter.org bugzilla-daemon@netfilter.org
Tue, 10 Jun 2003 09:35:42 +0200


https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=97

           Summary: iptables-restore can't load negated module parameter
                    written by same version iptables-save
           Product: iptables userspace
           Version: 1.2.8
          Platform: All
        OS/Version: other
            Status: NEW
          Severity: major
          Priority: P2
         Component: iptables-restore
        AssignedTo: laforge@netfilter.org
        ReportedBy: brad@danga.com
                CC: brad@danga.com,netfilter-buglog@lists.netfilter.org


summary says it best.

example:

goathack:/etc/init.d# iptables -L OUTPUT
Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
DROP       tcp  --  anywhere             localhost          !OWNER UID match
ljtest tcp dpt:11211 

goathack:/etc/init.d# iptables-save 
# Generated by iptables-save v1.2.8 on Tue Jun 10 00:33:26 2003
*filter
:INPUT ACCEPT [37085:5225985]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [32236:10113869]
-A OUTPUT -d 127.0.0.1 -p tcp -m owner !--uid-owner ljtest -m tcp --dport 11211
-j DROP 
COMMIT
# Completed on Tue Jun 10 00:33:26 2003

goathack:/etc/init.d# iptables-save | iptables-restore 
Bad argument `!--uid-owner'
Error occured at line: 6
Try `iptables-restore -h' or 'iptables-restore --help' for more information.



------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.