Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
For bugs related to Red Hat Enterprise Linux 5 product line. The current stable release is 5.10. For Red Hat Enterprise Linux 6 and above, please visit Red Hat JIRA https://issues.redhat.com/secure/CreateIssue!default.jspa?pid=12332745 to report new issues.

Bug 250531

Summary: The "value" of "-m dscp -dscp" for iptables command can be set with [0~64]
Product: Red Hat Enterprise Linux 5 Reporter: zhangxiliang <zhangxiliang>
Component: iptablesAssignee: Thomas Woerner <twoerner>
Status: CLOSED DUPLICATE QA Contact:
Severity: high Docs Contact:
Priority: low    
Version: 5.0   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-10-02 10:39:48 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
the patch to the iptables manpage for "--dscp" none

Description zhangxiliang 2007-08-02 01:56:36 UTC 
1.Summary:
  The "value" of "-m dscp -dscp" for iptables command can be set with [0~64].

2.Version-Release of Selected Component:
  iptables-1.3.5-1.2.1
 
3.Description of Problem: 
  Use option "-m dscp -dscp value" can match 6 bit DSCP field within the TOS
field in the IP header against a valid numeric value which is 0~32.
  But in fact, the option can still match 2^6 bit DSCP field. The range is 0~64.

4.How reproducible:
  100%.
 
5.Step to Reproduce:
  1. iptables -A INPUT -m dscp --dscp 33
  2. iptables -L INPUT | grep "DSCP match 0x21"

6.Actual results:
  The test case will display "FAIL"

7.Expected results:
  The test case will display "PASS"
Comment 1 zhangxiliang 2007-08-02 01:56:36 UTC 
Created attachment 160490 [details]
the patch to the iptables manpage for "--dscp"
Comment 2 zhangxiliang 2007-08-02 02:08:29 UTC 
Comment on attachment 160490 [details]
the patch to the iptables manpage for "--dscp"

>diff -ru iptables-1.3.5.org/extensions/libipt_dscp.man iptables-1.3.5/extensions/libipt_dscp.man
>--- iptables-1.3.5.org/extensions/libipt_dscp.man	2007-08-01 20:29:03.000000000 +0800
>+++ iptables-1.3.5/extensions/libipt_dscp.man	2007-08-01 20:30:09.000000000 +0800
>@@ -2,7 +2,7 @@
> IP header.  DSCP has superseded TOS within the IETF.
> .TP
> .BI "--dscp " "value"
>-Match against a numeric (decimal or hex) value [0-32].
>+Match against a numeric (decimal or hex) value [0-63].
> .TP
> .BI "--dscp-class " "\fIDiffServ Class\fP"
> Match the DiffServ class. This value may be any of the
Comment 3 Thomas Woerner 2007-10-02 10:39:48 UTC 

*** This bug has been marked as a duplicate of 239383 ***