[Bug 1250] New: extensions: libip6t_icmp6: unsupported ICMPv6 types

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1250

            Bug ID: 1250
           Summary: extensions: libip6t_icmp6: unsupported ICMPv6 types
           Product: iptables
           Version: 1.6.x
          Hardware: x86_64
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: ip6tables
          Assignee: netfilter-buglog at lists.netfilter.org
          Reporter: ao2 at ao2.it

Hi,

some ICMPv6 types are not supported.

$ sudo ip6tables -p ipv6-icmp -h
Valid ICMPv6 Types:
destination-unreachable
   no-route
   communication-prohibited
   beyond-scope
   address-unreachable
   port-unreachable
   failed-policy
   reject-route
packet-too-big
time-exceeded (ttl-exceeded)
   ttl-zero-during-transit
   ttl-zero-during-reassembly
parameter-problem
   bad-header
   unknown-header-type
   unknown-option
echo-request (ping)
echo-reply (pong)
router-solicitation
router-advertisement
neighbour-solicitation (neighbor-solicitation)
neighbour-advertisement (neighbor-advertisement)
redirect

The list is missing at least types 130, 131, and 132; possibly others.

Quoting the nftables man page:
...
+------------------------+-------+
|mld-listener-query      | 130   |
+------------------------+-------+
|mld-listener-report     | 131   |
+------------------------+-------+
|mld-listener-done       | 132   |
+------------------------+-------+
...


It looks like it it still possible to match them using numbers, like:

-p ipv6-icmp --icmpv6-type 130

but it would be great if names could be used.

Thanks,
   Antonio

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20180427/e1dffa40/attachment.html>