netfilter buglog - Feb 2017 - [Bug 1124] New: manual page does not describe special icmp type of 255

https://bugzilla.netfilter.org/show_bug.cgi?id=1124

            Bug ID: 1124
           Summary: manual page does not describe special icmp type of 255
           Product: iptables
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: iptables
          Assignee: netfilter-buglog at lists.netfilter.org
          Reporter: alexis at m2osw.com

When I type `man iptables-extensions` under Ubuntu 16.04, I get a page with the
following description of the ICMP type:

   icmp (IPv4-specific)
       This extension can be used if `--protocol icmp' is specified. It
provides the following option:

       [!] --icmp-type {type[/code]|typename}
              This allows specification of the ICMP type, which can be a
numeric ICMP type, type/code pair, or one of the ICMP type names shown
              by the command
               iptables -p icmp -h


As we can see, there is no word about the "Note" found on this page:

https://www.frozentux.net/iptables-tutorial/chunkyhtml/a6339.html

which clearly says that 255 is treated specially by iptables to mean
"any".

I think it would be a good thing to add that note to the manual page. Also
since there is a name "any", maybe make a clear correlation between
both.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20170220/2a79bc85/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1124

Florian Westphal <fw at strlen.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |fw at strlen.de

--- Comment #1 from Florian Westphal <fw at strlen.de> ---
(In reply to Alexis Wilke from comment #0)
> which clearly says that 255 is treated specially by iptables to mean
"any".
> 
> I think it would be a good thing to add that note to the manual page. Also
> since there is a name "any", maybe make a clear correlation
between both.
Not sure why this was implemented, if you want to match all icmp you can use
"-p icmp", no need for the icmp match.  Am I missing anything?

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20190716/62faabf7/attachment.html>