Bug 61044

Summary: multiport documentation bug
Product: [Retired] Red Hat Linux Reporter: Nigel Metheringham <nigel.metheringham>
Component: iptablesAssignee: Harald Hoyer <harald>
Status: CLOSED RAWHIDE QA Contact: Ben Levenson <benl>
Severity: low Docs Contact:
Priority: low    
Version: 7.2   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2002-08-12 14:29:56 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
iptables man page patch for multiport extension none

Description Nigel Metheringham 2002-03-12 16:51:02 UTC
Current RH version of iptables - iptables-1.2.4-2 - misdocuments the multiport
extension.  All of the --*port options should actually be --*ports (ie with
and additional s).   If used as documented the error message is strange because
the options given are legal for the tcp/udp module.

Patch attached corrects this part of the man page, and gives --sports as a
synonym for --source-ports as well.

Comment 1 Nigel Metheringham 2002-03-12 16:51:52 UTC
Created attachment 48286 [details]
iptables man page patch for multiport extension

Comment 2 Harald Hoyer 2002-08-12 13:43:53 UTC
huh???
# iptables -m tcp --help
iptables v1.2.6a
....
 --source-port [!] port[:port]
 --sport ...
                                match source port(s)
 --destination-port [!] port[:port]
 --dport ...
                                match destination port(s)


since when is that????

Comment 3 Nigel Metheringham 2002-08-12 14:29:50 UTC
Its for *multiport* as the original bug said.

/sbin/iptables --proto tcp --match multiport --help
[...]
multiport v1.2.5 options:
 --source-ports port[,port,port...]
 --sports ...
				match source port(s)
 --destination-ports port[,port,port...]
 --dports ...
				match destination port(s)
 --ports port[,port,port]
				match both source and destination port(s)


Comment 4 Harald Hoyer 2002-08-12 14:36:00 UTC
seems to be already fixed in 
$ rpm -q iptables
iptables-1.2.6a-1

$ man iptables
...
   multiport
       This  module  matches  a  set of source or destination ports.  Up to 15
       ports can be specified.  It can only be used in conjunction with -p tcp
       or -p udp.

       --source-ports port[,port[,port...]]
              Match  if  the  source port is one of the given ports.  The flag
              --sports is a convenient alias for this option.

       --destination-ports port[,port[,port...]]
              Match if the destination port is one of the  given  ports.   The
              flag --dports is a convenient alias for this option.

       --ports port[,port[,port...]]
              Match  if the both the source and destination ports are equal to
              each other and to one of the given ports.
...