Package: iptables Version: 1.4.2-6 Severity: minor
Hi, The manpage for ip6tables lists several types for the reject-with option. They are listed as icmp-* exactly like the appear in the IPv4 iptables manpage, however, those options are incorrect and should be replaced with icmp6-* instead. This simple patch should do the trick: ---8<------------------------------------------------------------------ --- ip6tables.man.old 2009-02-17 14:46:50.000000000 +0200 +++ ip6tables.man 2009-02-17 14:46:14.000000000 +0200 @@ -1619,13 +1619,13 @@ .BI "\-\-reject-with " "type" The type given can be .nf -.B " icmp-net-unreachable" -.B " icmp-host-unreachable" -.B " icmp-port-unreachable" -.B " icmp-proto-unreachable" -.B " icmp-net-prohibited" -.B " icmp-host-prohibited or" -.B " icmp-admin-prohibited (*)" +.B " icmp6-net-unreachable" +.B " icmp6-host-unreachable" +.B " icmp6-port-unreachable" +.B " icmp6-proto-unreachable" +.B " icmp6-net-prohibited" +.B " icmp6-host-prohibited or" +.B " icmp6-admin-prohibited (*)" .fi which return the appropriate ICMP error message (\fBport-unreachable\fP is the default). The option ---8<------------------------------------------------------------------ Cheers. -- System Information: Debian Release: 5.0 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.26-1-amd64 (SMP w/4 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/bash Versions of packages iptables depends on: ii libc6 2.7-18 GNU C Library: Shared libraries iptables recommends no packages. iptables suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org