path: root/extensions
diff options
authorPhil Sutter <>2018-10-31 20:13:34 +0100
committerPablo Neira Ayuso <>2018-11-01 00:20:59 +0100
commit8c918db6a7afc171fb2baf9c20ec6385940d2bfc (patch)
treef1e73f88fee1c5d19c303964988058fa42e56ad3 /extensions
parentb2fc2a368562d55fadad94d995247bb8cd7e68a3 (diff)
xtables: Fix for matching rules with wildcard interfaces
Due to xtables_parse_interface() and parse_ifname() being misaligned regarding interface mask setting, rules containing a wildcard interface added with iptables-nft could neither be checked nor deleted. As suggested, introduce extensions/iptables.t to hold checks for built-in selectors. This file is picked up by as-is. The only limitation is that iptables is being used for it, so no ip6tables-specific things can be tested with it (for now). Signed-off-by: Phil Sutter <> Signed-off-by: Pablo Neira Ayuso <>
Diffstat (limited to 'extensions')
1 files changed, 4 insertions, 0 deletions
diff --git a/extensions/iptables.t b/extensions/iptables.t
new file mode 100644
index 00000000..65456ee9
--- /dev/null
+++ b/extensions/iptables.t
@@ -0,0 +1,4 @@
+-i alongifacename0;=;OK
+-i thisinterfaceistoolong0;;FAIL
+-i eth+ -o alongifacename+;=;OK