[Bug 842] Addition of iptables rule referencing an ipset of the wrong address family does not fail

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Tue Aug 13 10:35:41 CEST 2013


https://bugzilla.netfilter.org/show_bug.cgi?id=842

--- Comment #1 from Quentin Armitage <quentin at armitage.org.uk> 2013-08-13 10:35:41 CEST ---
There is also the following scenario, which clearly cannot achieve anything:

# ipset create foo4 hash:ip family inet netmask 24
# ipset add foo4 192.0.2.0      # This step isn't necessary
# ip6tables -I OUTPUT -m set ! --match-set foo4 dst -j SET --add-set foo4 dst

or I suppose even more simply:
# ip6tables -I OUTPUT -j SET --add-set foo4 dst

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.



More information about the netfilter-buglog mailing list