Displaying 1 result from an estimated 1 matches for "cafe2342".
2009 Feb 16
2
[Bug 577] New: cannot set spi/reqid numbers higher than 0x7fffffff (policy match)
...y match, the option argument for --spi is converted
using strtol(), which returns a signed 32 bit value, so the highest
positive value is 0x7fffffff. Instead strtoul() should be used.
The same applies for the --reqid option argument.
Setting a rule like
iptables -A FORWARD -m policy --dir in --spi cafe2342 -j ACCEPT
and looking at the chain afterwards will give the following
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
policy match dir...