[Bug 866] Missing newline with --list-rules

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Fri Oct 25 19:35:08 CEST 2013


https://bugzilla.netfilter.org/show_bug.cgi?id=866

--- Comment #3 from Phil Oester <netfilter at linuxace.com> 2013-10-25 19:35:07 CEST ---
You seem to be missing the point that using iptables -S (or iptables-save) is
intended to be used to restore the rules (perhaps via iptables-restore).  If it
finds a match it does not recognize (like quota2), then it can't print out the
options used with that match (like the quota for instance).  This is a critical
failure, and exiting is appropriate.  If you'd like to see the full ruleset,
use iptables -nvL instead, which will show you everything, even unknown matches
(which is ok, since you can't easily attempt to use this output to restore
rules).  

# iptables -nvL foo
Chain foo (0 references)
 pkts bytes target     prot opt in     out     source               destination 
    0     0            all  --  *      *       0.0.0.0/0            0.0.0.0/0  
        UNKNOWN match `quota' 
    0     0            all  --  *      *       0.0.0.0/0            0.0.0.0/0  
        UNKNOWN match `quota' 
    0     0            all  --  *      *       0.0.0.0/0            0.0.0.0/0  
        UNKNOWN match `quota' 
    0     0            all  --  *      *       1.2.3.4              0.0.0.0/0   
    0     0            all  --  *      *       1.2.3.4              0.0.0.0/0   
    0     0            all  --  *      *       1.2.3.4              0.0.0.0/0   
    0     0            all  --  *      *       1.2.3.4              0.0.0.0/0

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.



More information about the netfilter-buglog mailing list