Package: ferm
Version: 2.0.6-1
Severity: wishlist
Hi,
proto tcp dport 80 @subchain "S40-apt-client" {
daddr (
195.71.68.86 # source.rfc822.org, ftp2.de.d.o
130.89.149.21 # debian.snt.utwente.nl, security.d.o
195.20.242.89 # wieck.d.o, security.d.o
212.211.132.32 # villa.d.o, security.d.o
212.211.132.250 # lobos.d.o, security.d.o
) jump acc;
}
works fine. Now, when I want the subchain to include the "proto tcp
dport 80" in its rules for clarity, writing
proto tcp dport 80 @subchain "S40-apt-client" {
proto tcp dport 80 daddr (
195.71.68.86 # source.rfc822.org, ftp2.de.d.o
130.89.149.21 # debian.snt.utwente.nl, security.d.o
195.20.242.89 # wieck.d.o, security.d.o
212.211.132.32 # villa.d.o, security.d.o
212.211.132.250 # lobos.d.o, security.d.o
) jump acc;
}
results in an unimportable output file:
-A S40-apt-client --protocol tcp --protocol tcp --dport 80 --destination
195.71.68.86 --jump acc
(note the doubled --protocol tcp).
writing
proto tcp dport 80 @subchain "S40-apt-client" {
dport 80 daddr (
195.71.68.86 # source.rfc822.org, ftp2.de.d.o
130.89.149.21 # debian.snt.utwente.nl, security.d.o
195.20.242.89 # wieck.d.o, security.d.o
212.211.132.32 # villa.d.o, security.d.o
212.211.132.250 # lobos.d.o, security.d.o
) jump acc;
}
produces the desired output, but I somehow don't believe that this is
actually intended. If this is the intended behavior, then please slap
me with a large trout and close this bug.
Greetings
Marc
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
