Bug 73723

Summary: two bug fixes
Product: [Retired] Red Hat Linux Reporter: Michael Schwendt <bugs.michael>
Component: iptablesAssignee: wdovlrrw <brosenkr>
Status: CLOSED RAWHIDE QA Contact: Ben Levenson <benl>
Severity: medium Docs Contact:
Priority: medium    
Version: 8.0Keywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2003-01-13 21:06:51 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
iptables-tcpmss.patch
none
iptables-matchmac.patch none

Description Michael Schwendt 2002-09-09 15:32:07 UTC 
Just in case there is still time left to include these two patches, that would
be appreciated. They are against 1.2.7a, but also work with 1.2.6a. They fix two
bugs in iptables-save and iptables -L.

Version-Release number of selected component (if applicable):
1.2.6a-2

How reproducible:
Always
Comment 1 Michael Schwendt 2002-09-09 15:32:34 UTC 
Created attachment 75565 [details]
iptables-tcpmss.patch
Comment 2 Michael Schwendt 2002-09-09 15:33:05 UTC 
Created attachment 75566 [details]
iptables-matchmac.patch
Comment 3 Michael Schwendt 2002-10-18 16:34:44 UTC 
Changed "Product" from "(null)" to "Psyche".
Comment 4 Michael Schwendt 2002-11-07 11:27:11 UTC 
Steps to reproduce:

  iptables -N test
  iptables -I test -p tcp --tcp-flags SYN,RST SYN -m tcpmss \
    --mss 6000:6001 -j LOG
  iptables-save | iptables-restore

Results in:

  iptables-restore v1.2.6a: Invalid mss `6001-j' specified
  Try `iptables-restore -h' or 'iptables-restore --help' for more information.

Second case:

  iptables -N test
  iptables -I test -m mac --mac-source 01:02:03:04:05:06 -j LOG
  iptables-save

prints --mac instead of --mac-source. Not serious, but not right either, because
both "iptables -m mac --help" and the manual state --mac-source.


The patches have been integrated up-stream and work for iptables 1.2.5
(Valhalla), iptables 1.2.6a (Psyche), 1.2.7a and CVS.
Comment 5 Bill Nottingham 2003-01-13 21:06:51 UTC 
Fixed in 1.2.7a-1.