Description of Problem: Some firewall rules are subtly altered by iptables-save. Notably, interface names such as ppp+ become simply ppp, and --reject-with icmp-port-unreachable becomes --reject-with icmp-proto-unreachable How Reproducible: always Steps to Reproduce: 1. iptables -N TEST_CHAIN && iptables -A TEST_CHAIN -i ppp+ -j REJECT --reject-with icmp-port-unreachable 2. iptables-save | fgrep TEST_CHAIN 3. iptables -F TEST_CHAIN && iptables -X TEST_CHAIN Actual Results: :TEST_CHAIN - [0:0] -A TEST_CHAIN -i ppp -j REJECT --reject-with icmp-proto-unreachable Expected Results: :TEST_CHAIN - [0:0] -A TEST_CHAIN -i ppp+ -j REJECT --reject-with icmp-port-unreachable Additional Information: iptables-1.2.1a-1 and kernel 2.4.5 (not the pristine RedHat kernel), but this is probably irrelevant
Created attachment 20743 [details] fix iptables-save
Thanks, fixed in 1.2.2-2