Your message dated Thu, 18 Jun 2009 19:02:55 +0000
with message-id <[email protected]>
and subject line Bug#528736: fixed in iptables 1.4.4-1
has caused the Debian Bug report #528736,
regarding intrapositioned vs. extrapositioned
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
528736: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528736
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: iptables
Version: 1.4.3.2-2
This bug is NOT fixed in the lastest version of iptables (1.4.3.2-2).
I'm running Debian squeeze.
I have the following (perfectly correct) rules on my iptables script:
## Drop packets claiming to be from the loopback network (127.0.0.0/8)
$IPTABLES -A INPUT -i ! lo -s $LOOPBACK_NETWORK -j DROP
## Drop packets to the loopback network (127.0.0.0/8) that doesn't use lo
$IPTABLES -A INPUT -i ! lo -d $LOOPBACK_NETWORK -j DROP
Everytime I start or restart my rules (for instance doing a "/etc/init.d/firewall
restart") I get the following error messages:
Stopping the firewall... [End of flush]
Starting the firewall...
Using intrapositioned negation (`--option ! this`) is deprecated in favor of
extrapositioned (`! --option this`).
Using intrapositioned negation (`--option ! this`) is deprecated in favor of
extrapositioned (`! --option this`).
[End iptables rules setting]
If I remove those rules the error messages disappear.
The error messages also dissapear if I substitute de above rules for
the following stupid an wrong rules:
$IPTABLES -A INPUT ! -i lo -s $LOOPBACK_NETWORK -j DROP
$IPTABLES -A INPUT ! -i lo -d $LOOPBACK_NETWORK -j DROP
--- End Message ---
--- Begin Message ---
Source: iptables
Source-Version: 1.4.4-1
We believe that the bug you reported is fixed in the latest version of
iptables, which is due to be installed in the Debian FTP archive:
iptables-dev_1.4.4-1_amd64.deb
to pool/main/i/iptables/iptables-dev_1.4.4-1_amd64.deb
iptables_1.4.4-1.diff.gz
to pool/main/i/iptables/iptables_1.4.4-1.diff.gz
iptables_1.4.4-1.dsc
to pool/main/i/iptables/iptables_1.4.4-1.dsc
iptables_1.4.4-1_amd64.deb
to pool/main/i/iptables/iptables_1.4.4-1_amd64.deb
iptables_1.4.4.orig.tar.gz
to pool/main/i/iptables/iptables_1.4.4.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Laurence J. Lane <[email protected]> (supplier of updated iptables package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Thu, 18 Jun 2009 08:14:55 -0400
Source: iptables
Binary: iptables iptables-dev
Architecture: source amd64
Version: 1.4.4-1
Distribution: unstable
Urgency: low
Maintainer: Laurence J. Lane <[email protected]>
Changed-By: Laurence J. Lane <[email protected]>
Description:
iptables - administration tools for packet filtering and NAT
iptables-dev - iptables development files
Closes: 524862 528457 528736 531677
Changes:
iptables (1.4.4-1) unstable; urgency=low
.
* New upstream release
* Upstream added Ian Bruce's man page errors fix. Thanks.
Closes: #531677
* Upstream added Piotr Lewandowski's iptables(8) typo fix. Thanks.
Closes: #528457
* Upstream fixed intraposition vs extraposition deprecation warning.
Thanks. Closes: #528736
* Added ip6tables-apply symlinks for martin f krafft. Closes: #524862
Checksums-Sha1:
ae51fbdd7aed17ef92c8213355b32cb04eaadec1 1043 iptables_1.4.4-1.dsc
b9145dffcc86058b27693aecce8a16a7c81046bc 571612 iptables_1.4.4.orig.tar.gz
6ae7f4187f78f2aebde240b56c85624585048bad 34513 iptables_1.4.4-1.diff.gz
9ae8e280e150e50758398c4d07e35a3400d3a562 416634 iptables_1.4.4-1_amd64.deb
d156b418765a183244f0916c8158b8a8d63e207e 53146 iptables-dev_1.4.4-1_amd64.deb
Checksums-Sha256:
f407a21f0469fa50e84b5256b0eaac8833c481606fef8ea273564bb502d4169d 1043
iptables_1.4.4-1.dsc
fa5e1ef43accde5d8aec3b97224d243adfd39bf142c5eb6f2c2c98879c29721f 571612
iptables_1.4.4.orig.tar.gz
d898312ec1236a70288378eaca90dc58167e011f01f9d5becc1af209e3b4e5bc 34513
iptables_1.4.4-1.diff.gz
fca75dc2ef05ee46c38fa6f92e0704dc46063af33f473e552b1e1b26f074b175 416634
iptables_1.4.4-1_amd64.deb
9c73052d0872eda13795d9ae9f9868cabb02f0222e33420ea19a8754c7169fc4 53146
iptables-dev_1.4.4-1_amd64.deb
Files:
49a0fab018010e08130e206c6fdf24a8 1043 net important iptables_1.4.4-1.dsc
184ca9c51f229fbe2ee536519b3a1b8b 571612 net important
iptables_1.4.4.orig.tar.gz
b3f33b2aceeb123d6c112fb0d6ca2b26 34513 net important iptables_1.4.4-1.diff.gz
bab9aae2b3d3dc934dde069a3f200809 416634 net important
iptables_1.4.4-1_amd64.deb
dad78a07471e56809b5315aece1bf32e 53146 devel optional
iptables-dev_1.4.4-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAko6kA8ACgkQxJBkNlXToel9tQCfdmUg1JCA7k9IPpPRGdfpQTKZ
eikAn2KE2QsqF9++0ksvXIp7mj1o+o3k
=yKSf
-----END PGP SIGNATURE-----
--- End Message ---
