Upgrade to Feisty breaks FireHOL or possibly iptables

[Peter Garrett]

On Fri, 16 Mar 2007 06:26:44 -0400
Lorenzo Taylor <lorenzo at taylor.homelinux.net> wrote:

I just upgraded from Edgy to Feisty, but found that my firewall is no
longer working.  I get a stream of iptables errors that look like

> /sbin/iptables -t filter -A out_gateway1_ftp_s3 -p tcp --sport
> 1000:65535 --dport 1000:65535 -m state '' --state ESTABLISHED -j ACCEPT

The " after -m state  looks wrong to me - all the other errors appear to
have a bogus " in them as well. I think, for example, the command above
would normally be written

 /sbin/iptables -t filter -A out_gateway1_ftp_s3 -p tcp --sport \
1000:65535 --dport 1000:65535 -m state  --state ESTABLISHED -j ACCEPT

( I inserted the "\" to show a new line where it wraps in my mail client -
that would normally not be included.

Perhaps firehol has a bug ? I'm no iptables expert, but I don't think that
quote mark needs to be there. 

Peter