Package: iptables-converter
Version: 0.9.3-1
Severity: important

Hi,
the current logic will fail badly if functions are in use like:

####### 
block () {
/sbin/iptables -A INPUT -i eth0 -p udp -j REJECT -s 10.0.0.0/16 -d 10.0.0.1 
--dport ipp

}

allow () {
/sbin/iptables -A INPUT -i eth0 -p udp -j ACCEPT -s 10.0.0.0/16 -d 10.0.0.1 
--dport ipp
}

allow
block
########

In the above case it would block all traffic instead of allowing it.
Cheers,
 -- Guido


-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'testing-updates'), (500, 'unstable'), 
(1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.14.0-rc1+ (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages iptables-converter depends on:
ii  python  2.7.5-5

iptables-converter recommends no packages.

iptables-converter suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to