domain eb ip match wrong rule

[532910]

correct command:

ebtables -t broute -A BROUTING --protocol IPV4 --match ip --source <IP> --jump ACCEPT

in ferm form:

% cat test.conf
domain eb table broute chain BROUTING {
	 proto IPV4 mod ip source <IP> ACCEPT;
}
% /usr/sbin/ferm --shell --remote test.conf
...
ebtables -t broute -A BROUTING --protocol IPV4 --match ip --source <IP> --jump ACCEPT

# ebtables ...
Unknown argument: '--match

[532910]

Any update?

[532910]

Really correct command is the:

ebtables -t broute -A BROUTING --protocol IPV4 --ip-source <IP> --jump ACCEPT

[532910]

@MaxKellermann: what's wrong with this issue, could you at least confirm it?

[MaxKellermann]

Your ferm file is incorrect, and thus ferm renders incorrect rules. Shit in, shit out. This is what you're looking for:

domain eb table broute chain BROUTING {
  proto IPv4 ip-source IP ACCEPT;
}

[532910]

Is this due to debian compilation flags or outdated package? As I see basic.ferm was last modified in 2011, so it's not a recent featrure.

% /usr/sbin/ferm --remote test.conf
Error in test.conf line 4:
domain eb table broute chain BROUTING 
{ 
    proto IPV4 ip-source <--
Unrecognized keyword: ip-source

ferm 2.4 debian sid

[532910]

It should be wrong proto rather than Unrecognized keyword: ip-source as it's due to IPV4 and IPv4 is correct.