[Bug 1751] New: ip6tables-restore doesn't restore counters

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Mon Apr 29 14:09:17 CEST 2024


https://bugzilla.netfilter.org/show_bug.cgi?id=1751

            Bug ID: 1751
           Summary: ip6tables-restore doesn't restore counters
           Product: iptables
           Version: 1.8.x
          Hardware: x86_64
                OS: Ubuntu
            Status: NEW
          Severity: minor
          Priority: P5
         Component: iptables-restore
          Assignee: netfilter-buglog at lists.netfilter.org
          Reporter: anton.khazan at gmail.com

Created attachment 742
  --> https://bugzilla.netfilter.org/attachment.cgi?id=742&action=edit
shell script demonstrating the bug

To reproduce the issue:

ip6tables -X TEST_CNT 2>/dev/null
cat <<EOF | ip6tables-restore -c -n
*filter
:TEST_CNT - [0:0]
[1024:1024] -A TEST_CNT -m comment --comment test_cnt -j ACCEPT
COMMIT
EOF
# end of script

Expected output:
[1024:1024] -A TEST_CNT -m comment --comment test_cnt -j ACCEPT

Actual output:
[0:0] -A TEST_CNT -m comment --comment test_cnt -j ACCEPT


The issue only affects ip6tables-restore (iptables-restore does restore the
counters).

Tested on Linux Mint with nftables.

'ip6tables -V' output:
ip6tables v1.8.7 (nf_tables)

The issue is not happening with ip6tables-restore v1.6.0 on another Debian
system (no nftables installed).

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20240429/1d7cd6b0/attachment.html>


More information about the netfilter-buglog mailing list