netfilter buglog - May 2013 - [Bug 824] New: --utc option is not working in iptables version 1.4.7/8

https://bugzilla.netfilter.org/show_bug.cgi?id=824

           Summary: --utc option is not working in iptables version
                    1.4.7/8
           Product: iptables
           Version: unspecified
          Platform: i386
        OS/Version: Fedora
            Status: NEW
          Severity: major
          Priority: P5
         Component: iptables
        AssignedTo: netfilter-buglog at lists.netfilter.org
        ReportedBy: pradiptart at gmail.com
   Estimated Hours: 0.0


Hi,

I am using iptables v1.4.7/8.

I used the following command

iptables -A INPUT -s 10.0.4.247 -m time --utc  --datestart 2013-5-23T7
--datestop 2013-5-23T10:30 -j DROP

my utc time

#date -u

Thu May 23 10:25:48 UTC 2013

#iptables -L

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
DROP       all  --  10.0.4.247  anywhere            TIME starting from
2013-05-23 07:00:00 until date 2013-05-23 10:30:00 UTC

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

but how I can able to ping from the IP 10.0.4.247 after this command and I am
doing with in the blocking time.

One more thing is my local time

#date

Thu May 23 15:57:40 IST 2013

when i am giving following command it is able to block the traffic in the time
even i specified  --utc.

iptables -A INPUT -s 10.0.4.247 -m time --utc  --datestart 2013-5-23T11
--datestop 2013-5-23T16 -j DROP

successfully blocked the traffic for the time given.

but I want it to check the UTC time not local time.how to do this.

Thanks
pradipta

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

https://bugzilla.netfilter.org/show_bug.cgi?id=824

pradipta <pradiptart at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |pradiptart at gmail.com

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

https://bugzilla.netfilter.org/show_bug.cgi?id=824

pradipta <pradiptart at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         OS/Version|Fedora                      |All

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

https://bugzilla.netfilter.org/show_bug.cgi?id=824

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
                 CC|                            |pablo at netfilter.org

--- Comment #1 from Pablo Neira Ayuso <pablo at netfilter.org> 2013-05-23
13:42:56 CEST ---
Please, retest with iptables current (1.4.18), several patches related to utc
went into iptables since that version you're using.

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

https://bugzilla.netfilter.org/show_bug.cgi?id=824

--- Comment #2 from pradipta <pradiptart at gmail.com> 2013-05-23 14:35:48
CEST ---
(In reply to comment #1)
> Please, retest with iptables current (1.4.18), several patches related to
utc
> went into iptables since that version you're using.
hi, 
How to find all the patch related to utc.
Thanks

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

https://bugzilla.netfilter.org/show_bug.cgi?id=824

--- Comment #3 from pradipta <pradiptart at gmail.com> 2013-05-23 15:05:22
CEST ---
(In reply to comment #1)
> Please, retest with iptables current (1.4.18), several patches related to
utc
> went into iptables since that version you're using.
hi,i am using v1.4.7 and v1.4.8 in two system not v1.4.18.but how to find the
patches releted utc.

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

https://bugzilla.netfilter.org/show_bug.cgi?id=824

--- Comment #4 from pradipta <pradiptart at gmail.com> 2013-05-23 15:24:14
CEST ---
(In reply to comment #1)
> Please, retest with iptables current (1.4.18), several patches related to
utc
> went into iptables since that version you're using.
Hi,

I am using kernel version 2.6.28.10 ,and I am working on embedded system
project.I am having one doubt can i able to upgrade my iptables to 1.4.18 on
kernel what i am using now(2.6.28.10) or is there any dependencies problem for
this.because I may not allow to change the kernel.

kindly tell something.

Thanks
pradipta

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

https://bugzilla.netfilter.org/show_bug.cgi?id=824

Phil Oester <netfilter at linuxace.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
                 CC|                            |netfilter at linuxace.com
         Resolution|                            |WORKSFORME

--- Comment #5 from Phil Oester <netfilter at linuxace.com> 2013-05-23
22:17:46 CEST ---
Anyone can browse the iptables git tree.  Have you done so?  Here's a hint:

http://git.netfilter.org/iptables/

Or, more specifically:

http://git.netfilter.org/iptables/commit/?id=db50b83bc3cd634beb71f38978ad7d035c88ff11

The time match works properly with UTC now - tested and verified on 1.4.16.2.

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

https://bugzilla.netfilter.org/show_bug.cgi?id=824

--- Comment #6 from pradipta <pradiptart at gmail.com> 2013-05-24 06:59:33
CEST ---
(In reply to comment #5)
> Anyone can browse the iptables git tree.  Have you done so?  Here's a
hint:
> 
> http://git.netfilter.org/iptables/
> 
> Or, more specifically:
> 
>
http://git.netfilter.org/iptables/commit/?id=db50b83bc3cd634beb71f38978ad7d035c88ff11
> 
> The time match works properly with UTC now - tested and verified on
1.4.16.2.
Hi,
Sorry to ask again ,Is the latest version of iptables is compatible with the
kernel version I am using or any dependencies are there.I want to upgrade but
do not know it will work or not.

Kindly tell this is very important for my project.

Thanks
pradipta

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

https://bugzilla.netfilter.org/show_bug.cgi?id=824

--- Comment #7 from Phil Oester <netfilter at linuxace.com> 2013-05-24
14:17:25 CEST ---
Yes, the latest iptables versions work fine with 2.6.28 kernels.

If you have further questions on this topic, please send an email to the
Netfilter mailing list.  

http://netfilter.org/mailinglists.html#ml-user

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

https://bugzilla.netfilter.org/show_bug.cgi?id=824

--- Comment #8 from pradipta <pradiptart at gmail.com> 2013-05-24 14:36:38
CEST ---
(In reply to comment #5)
> Anyone can browse the iptables git tree.  Have you done so?  Here's a
hint:
> 
> http://git.netfilter.org/iptables/
> 
> Or, more specifically:
> 
>
http://git.netfilter.org/iptables/commit/?id=db50b83bc3cd634beb71f38978ad7d035c88ff11
> 
> The time match works properly with UTC now - tested and verified on
1.4.16.2.
Hi,

I went through all the patches but how to patch at once or is there any patch
by using which my iptables will work using utc.
I am asking because I saw the parent of each patch. 

I am confused how to patch all at once.

I want only this utc option to work in my current version,I will patch it to
work but can you tell me which patch I have to use or I have to use all the
pathces sequentially as it says the parent in the patch list.

kindly tell where to start.

Thanks(In reply to comment #7)
> Yes, the latest iptables versions work fine with 2.6.28 kernels.
> 
> If you have further questions on this topic, please send an email to the
> Netfilter mailing list.  
> 
> http://netfilter.org/mailinglists.html#ml-user

Hi,

Sorry to send again as ,That mailing list is not working i tried the use list.
it says sending failed.so asking again.

I went through all the patches but how to patch at once or is there any patch
by using which my iptables will work using utc.
I am asking because I saw the parent of each patch. 

I am confused how to patch all at once.

I want only this utc option to work in my current version,I will patch it to
work but can you tell me which patch I have to use or I have to use all the
pathces sequentially as it says the parent in the patch list.


OR 

can i directly use the patch given by you

http://git.netfilter.org/iptables/commit/?id=db50b83bc3cd634beb71f38978ad7d035c88ff11

if yes kindly tell how to do so.


Thanks

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

https://bugzilla.netfilter.org/show_bug.cgi?id=824

--- Comment #9 from Phil Oester <netfilter at linuxace.com> 2013-05-24
14:43:01 CEST ---
As I said: ask further questions on the Netfilter mailing list.  Bugzilla is
not the place for basic questions - it is for reporting bugs.

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.