Devuan bug report logs - #405
Iptables --tcp-option off by one

Package: iptables; Maintainer for iptables is (unknown); Source for iptables is src:iptables.

Reported by: Andrey Nikitushkin <a.v.nikitushkin@gmail.com>

Date: Sat, 29 Feb 2020 21:48:01 UTC

Severity: normal

Tags: debian

Found in version 1.8.2

Done: Mark Hindley <mark@hindley.org.uk>

Full log

Message #5 received at submit@bugs.devuan.org (full text, mbox, reply):

Received: (at submit) by bugs.devuan.org; 29 Feb 2020 21:40:05 +0000
Return-Path: <a.v.nikitushkin@gmail.com>
Delivered-To: devuanbugs@dyne.org
Received: from tupac3.dyne.org [195.169.149.119]
	by doc.devuan.org with IMAP (fetchmail-6.4.0.beta4)
	for <debbugs@localhost> (single-drop); Sat, 29 Feb 2020 21:40:05 +0000 (UTC)
Received: from mail-wr1-f41.google.com (mail-wr1-f41.google.com [209.85.221.41])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by vm6.ganeti.dyne.org (Postfix) with ESMTPS id 7793DF60AEA
	for <submit@bugs.devuan.org>; Sat, 29 Feb 2020 22:38:23 +0100 (CET)
Authentication-Results: vm6.ganeti.dyne.org;
	dkim=pass (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.b="XK6/2TAX";
	dkim-atps=neutral
Received: by mail-wr1-f41.google.com with SMTP id v2so7645109wrp.12
        for <submit@bugs.devuan.org>; Sat, 29 Feb 2020 13:38:23 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=to:from:subject:message-id:date:user-agent:mime-version
         :content-language;
        bh=OEqqfdkVENy9b6sFYk0k/mHXrZCB664SB2Yp/atTeE0=;
        b=XK6/2TAXMhmBV1Xo58na6Wli37gaHUJFtUdp5oxv6+ueayurdFTL7E8NDcFygBEXUN
         O6OEJF6gW/q+/Dnui/6WREYEH2QngK6Okd9zEOvR1C1DhqVYMFZffbqzvwiff9OXhwMn
         xiaW0KkMr5q5g8Q541zY7ConLePPhkLtvtSSX/kddBrnVod5BiH83v/jg13Z7Wt2M/EW
         T8foiuLJ034IDFMG9H5G13HWltlmVG1fVloDiciGASzPzcJ05MkrcBBVsIBaWS64Nh4y
         izGdcDHA3SLz19MLGXA0apEfdw2cLONI2l84hOT7nJlZh9Zk7Y4/WvKtASg71CKLaswY
         BH/w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:to:from:subject:message-id:date:user-agent
         :mime-version:content-language;
        bh=OEqqfdkVENy9b6sFYk0k/mHXrZCB664SB2Yp/atTeE0=;
        b=BlxDWeORrIA9GsSItB4b/maF61d54dxfzr5L4IuKyVPpBB7v2VUufG3X3JA1t1tusJ
         s2xIpxap29v/b8tmzq5HhWpGM4qinaOF8mwvBHpQGyOKXsi6T5zlHKmYWZlV/BHbP0Lu
         Wxm7iiFKApmp9kgONPK6AXSGgTT7rD68rdF8i1Z8F9d/uEmj7W2hLvMb05Ix/spGpdPz
         2FwgcHZPNwhmHYtZfWCgusNIUhYs4ClSJ/1O0F5KQ7dJUXO7x0ROQKNf13LywXQTZ3Mv
         QeRKdEdiXiDQ77VAZN6CILWAu6g4ob/NiCTgmb8t8oRqWTuSckmPVYewhIIi8X+h2qqO
         lXNQ==
X-Gm-Message-State: APjAAAXhQZwcQvDffuDISVzXxejaLldrIlbxNctt6s93DH208mHA1bHQ
	qLG1v/qxIntV8z5baK6BGEYHMNLJ
X-Google-Smtp-Source: APXvYqxAsdodSne8E1JXjWppZ99JTNPBnwlxwPFUw/kadlbZVUdUaYE4LmZDyPNCweOg0G+a//MH0A==
X-Received: by 2002:adf:b19d:: with SMTP id q29mr12036036wra.211.1583012301664;
        Sat, 29 Feb 2020 13:38:21 -0800 (PST)
Received: from [192.168.132.2] (host-93-124-43-90.dsl.sura.ru. [93.124.43.90])
        by smtp.gmail.com with ESMTPSA id w19sm7510729wmc.22.2020.02.29.13.38.20
        for <submit@bugs.devuan.org>
        (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
        Sat, 29 Feb 2020 13:38:20 -0800 (PST)
To: submit@bugs.devuan.org
From: Andrey Nikitushkin <a.v.nikitushkin@gmail.com>
Subject: Iptables standartd issue
Message-ID: <31beb8d8-ece5-8288-52d3-149c833d59d1@gmail.com>
Date: Sun, 1 Mar 2020 00:38:17 +0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101
 Thunderbird/68.5.0
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="------------C71D0614AC7B5AB6F0537196"
Content-Language: en-US
X-Spam-Status: No, score=-0.2 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,HTML_MESSAGE,
	RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=disabled version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on tupac3.dyne.org

[Message part 1 (text/plain, inline)]

Package: iptables
Version: 1.8.2

Hello, friends!

In Devuan 1, Devuan 2, Devuan 3 (and Debian, and Ubuntu) have next 
standard issue with *iptables*!

The current range of values for the *--tcp-option* /iptables/ flag is 
1-255 - this is not correct. The correct range of values should be 
0-254. Please read the following information: 
https://www.iana.org/assignments/tcp-parameters/tcp-parameters.xhtml#tcp-parameters-1 
This negative change in /iptables/ was made approximately 2 years ago 
without making this change public. Please report this issue to the 
/iptables/ developers so that they can set the range of --tcp-option 
values in accordance with the accepted standards for the TCP Protocol.

Please see: https://dev1galaxy.org/viewtopic.php?id=3347

-- 
============================================
С наилучшими пожеланиями, Никитушкин Андрей!
Тел.(сот.): +79063975544
============================================

[Message part 2 (text/html, inline)]

Send a report that this bug log contains spam.

Devuan bug report logs - #405 Iptables --tcp-option off by one

Devuan bug report logs - #405
Iptables --tcp-option off by one