bugzilla-daemon at netfilter.org
2014-May-13 16:42 UTC
[Bug 940] New: ip6tables-save output invalid rule when using D/SNPT
https://bugzilla.netfilter.org/show_bug.cgi?id=940 Summary: ip6tables-save output invalid rule when using D/SNPT Product: iptables Version: 1.4.x Platform: x86_64 OS/Version: All Status: NEW Severity: normal Priority: P5 Component: ip6tables AssignedTo: netfilter-buglog at lists.netfilter.org ReportedBy: kjm.kznr+netfilter at gmail.com Estimated Hours: 0.0 Created attachment 442 --> https://bugzilla.netfilter.org/attachment.cgi?id=442 fix invalid output patch ip6tables-save command output invalid rules. Steps to reproduce: 1. ip6tables -t mangle -A PREROUTING -d 2001:db8:0:1::/64 -i eth1 -j DNPT --src-pfx 2001:db8:0:1::/64 --dst-pfx 2001:db8:ffff:2::/64 2. ip6tables -t mangle -A POSTROUTING -s 2001:db8:ffff:2::/64 -j SNPT --src-pfx 2001:db8:ffff:2::/64 --dst-pfx 2001:db8:0:1::/64 3. ip6tables-save -t mangle Actual Results: # ip6tables-save -t mangle # Generated by ip6tables-save v1.4.20 on Tue May 13 00:35:06 2014 *mangle :PREROUTING ACCEPT [0:0] :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] -A PREROUTING -d 2001:470:f9b0:a005::/64 -i eth1 -j DNPT--src-pfx 2001:470:f9b0:a005::/64 --dst-pfx fdde:3033:88c2:d005::/64 -A POSTROUTING -s fdde:3033:88c2:d005::/64 -j SNPT--src-pfx fdde:3033:88c2:d005::/64 --dst-pfx 2001:470:f9b0:a005::/64 COMMIT Expected Results: # Generated by ip6tables-save v1.4.20 on Wed May 14 01:36:03 2014 *mangle :PREROUTING ACCEPT [0:0] :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] -A PREROUTING -d 2001:470:f9b0:a005::/64 -i eth1 -j DNPT --src-pfx 2001:470:f9b0:a005::/64 --dst-pfx fdde:3033:88c2:d005::/64 -A POSTROUTING -s fdde:3033:88c2:d005::/64 -j SNPT --src-pfx fdde:3033:88c2:d005::/64 --dst-pfx 2001:470:f9b0:a005::/64 COMMIT -- Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.