[Bug 835] protocol without option is failing

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Thu Aug 15 02:04:46 CEST 2013


https://bugzilla.netfilter.org/show_bug.cgi?id=835

--- Comment #6 from Phil Oester <netfilter at linuxace.com> 2013-08-15 02:04:44 CEST ---
Two other things to consider.  

1) There are 255 possible protocols.  If we decide to allow these "shortcuts"
for tcp, udp, icmp, and a handful of others, invariably someone will complain
that they ALL should be supported ("Why isn't L2TP there?  Or OSPF??").  

2) If we allow bare "tcp" for protocol, why not allow "6"?  Of course, in
testing this, I discovered that nft doesn't support numbers now - even when
properly using "ip protocol".  

  nft add rule ip filter input ip protocol 6 accept                 
  <cmdline>:1:38-38: Error: Could not resolve protocol name

So this is a separate bug...

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.



More information about the netfilter-buglog mailing list