domain eb ip match wrong rule about ferm HOT 6 CLOSED

Any update?

from ferm.

Really correct command is the:

ebtables -t broute -A BROUTING --protocol IPV4 --ip-source <IP> --jump ACCEPT

from ferm.

@MaxKellermann: what's wrong with this issue, could you at least confirm it?

from ferm.

Your ferm file is incorrect, and thus ferm renders incorrect rules. Shit in, shit out. This is what you're looking for:

domain eb table broute chain BROUTING {
  proto IPv4 ip-source IP ACCEPT;
}

from ferm.

Is this due to debian compilation flags or outdated package? As I see basic.ferm was last modified in 2011, so it's not a recent featrure.

% /usr/sbin/ferm --remote test.conf
Error in test.conf line 4:
domain eb table broute chain BROUTING 
{ 
    proto IPV4 ip-source <--
Unrecognized keyword: ip-source

ferm 2.4 debian sid

from ferm.

It should be wrong proto rather than Unrecognized keyword: ip-source as it's due to IPV4 and IPv4 is correct.

from ferm.