Your message dated Thu, 7 Feb 2008 20:25:04 -0700
with message-id <[EMAIL PROTECTED]>
and subject line iptables: Iptables incorrectly determines length of chain
names in -N or -j
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: iptables
Version: 1.3.3-1bpo1
Severity: important
Dear Maintainer,
Today I stumbled upon this stupifying bug with chain name lengths.
It seems like the maximum chain name would be 30 characters. While shortening
the chain name however, iptables would
happily create a chain with a name that is 29 or 30 characters long, it would
list the chain with iptables -L, but
would fail to find the chain when I target it with -j. 28 characters works fine.
Please find a short self-explanatory script attached.
Regards,
Allard Hoeve
> [EMAIL PROTECTED] ~ # ~allard/iptables.lengthbug
>
> Trying this_chain_name_is_32_chars_long, which is 32 characters long
> + iptables -t nat -N this_chain_name_is_32_chars_long
> iptables v1.3.3: chain name `this_chain_name_is_32_chars_long' too long (must
> be under 30 chars)
> Try `iptables -h' or 'iptables --help' for more information.
> + set +x
>
> Trying this_chain_name_is_30_longgggg, which is 30 characters long
> + iptables -t nat -N this_chain_name_is_30_longgggg
> + iptables -t nat -A POSTROUTING -j this_chain_name_is_30_longgggg
> iptables: No chain/target/match by that name
> + set +x
>
> Trying this_chain_name_is_29_longggg, which is 29 characters long
> + iptables -t nat -N this_chain_name_is_29_longggg
> + iptables -t nat -A POSTROUTING -j this_chain_name_is_29_longggg
> iptables: No chain/target/match by that name
> + set +x
>
> Trying this_chain_name_is_28_longgg, which is 28 characters long
> + iptables -t nat -N this_chain_name_is_28_longgg
> + iptables -t nat -A POSTROUTING -j this_chain_name_is_28_longgg
> + set +x
> [EMAIL PROTECTED] ~ #
-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.17.7-fwsh-byte
Locale: LANG=en_US.UTF8, LC_CTYPE=en_US.UTF8 (charmap=UTF-8) (ignored: LC_ALL
set to en_US.UTF8)
Versions of packages iptables depends on:
ii libc6 2.3.2.ds1-22sarge6 GNU C Library: Shared libraries an
-- no debconf information
iptables.lengthbug
Description: application/shellscript
--- End Message ---
--- Begin Message ---
retitle 426697 [noop] iptables: Iptables incorrectly determines length of chain
names in -N or -j
thanks
Version: 1.3.5.0debian1-1
I guess this was fixed somewhere around 1.3.5.
--- End Message ---
