netfilter buglog - Apr 2019 - [Bug 1335] New: iptables-restore will crash if -6 rules are present

https://bugzilla.netfilter.org/show_bug.cgi?id=1335

            Bug ID: 1335
           Summary: iptables-restore will crash if -6 rules are present
           Product: iptables
           Version: unspecified
          Hardware: All
                OS: Debian GNU/Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: iptables-restore
          Assignee: netfilter-buglog at lists.netfilter.org
          Reporter: ingroxd at tutanota.com

iptables-restore (v1.8.2) crashes when loading a ruleset containing -6 rules.

This is inconsistent with the iptables manual:
-6, --ipv6
  If a rule using the -6 option is inserted with (and only with)
iptables-restore, it will be silently ignored. Any other uses will throw an
error. This  option  allows  IPv4  and IPv6  rules  in  a single rule file for
use with both iptables-restore and ip6tables-restore. This option has no effect
in ip6tables and ip6tables-restore.

Also, the error message is always a inconsistent, telling something else is the
problem.

In my case:
iptables-restore v1.8.2 (nf_tables): multiport needs `-p tcp', `-p udp',
`-p
udplite', `-p sctp' or `-p dccp'

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20190422/eead5bed/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1335

Florian Westphal <fw at strlen.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |fw at strlen.de
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #1 from Florian Westphal <fw at strlen.de> ---
Should work in soon-to-be-released 1.8.4:
https://git.netfilter.org/iptables/commit/?id=d76475ce1c30f6c3e3f3ca85964bdfc4425acb81

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20190916/86591d4b/attachment.html>