netfilter buglog - Jul 2011 - [Bug 731] New: Allow duplicate IPs with different MACs in bitmap:ip.mac

http://bugzilla.netfilter.org/show_bug.cgi?id=731

           Summary: Allow duplicate IPs with different MACs in bitmap:ip.mac
           Product: ipset
           Version: unspecified
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: default
        AssignedTo: netfilter-buglog at lists.netfilter.org
        ReportedBy: paszczus at gmail.com
   Estimated Hours: 0.0


Hello,
Is there any chance for support duplicate IPs with different MACs  in ipset?

In my network, there are some users that have few computers but use only one of
them at the same time, so i gave them only one IP address.

In iptables everything is OK, i have 2 rules like:

iptables -A FORWARD -m mac --mac-source 00:0F:EA:65:43:FD -s 10.0.0.105 -j
ACCEPT
iptables -A FORWARD -m mac --mac-source 00:0F:EA:65:56:AC -s 10.0.0.105 -j
ACCEPT

and it works fine with one computer at connected to the network at the same
time.

Now i`m switching to ipset and this is a problem, cause i cannot do the same
with ipset:

[root at lan ~]# ipset create test bitmap:ip,mac --network 10.0.0.0/24    
[root at lan ~]# ipset add test 10.0.0.105,00:0F:EA:65:43:FD           
[root at lan ~]# ipset add test 10.0.0.105,00:0F:EA:65:56:AC
ipset v6.8: Element cannot be added to the set: it's already added
[root at lan ~]# ipset list test
Name: test
Type: bitmap:ip,mac
Header: range 10.0.0.0-10.0.0.255 
Size in memory: 4208
References: 0
Members:
10.0.0.105,00:0F:EA:65:43:FD


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

http://bugzilla.netfilter.org/show_bug.cgi?id=731


Jan Engelhardt <jengelh at medozas.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jengelh at medozas.de
         AssignedTo|netfilter-                  |kadlec at netfilter.org
                   |buglog at lists.netfilter.org  |




-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

http://bugzilla.netfilter.org/show_bug.cgi?id=731


Jozsef Kadlecsik <kadlec at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX




--- Comment #1 from Jozsef Kadlecsik <kadlec at netfilter.org>  2011-08-10
14:25:58 ---
No, that's not possible. The bitmap:ip,mac type cannot store multiple MAC
addresses with a single IP address.

Simpler to assing an unique IP address to every computer :-).


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.