[pkg-netfilter-team] Bug#927795: iptables: 140.113.0.0/16 is incorrectly parsed as "not-a-legal-address"

[dongsheoil at gmail.com]

Package: iptables
Version: 1.6.1
Severity: normal

Dear Maintainers,

We found a weird bug: `iptables -L` will fail to parse this specific IP
range 140.113.0.0/16 . It's incorrectly marked as "not-a-legal-address."

$ iptables --version
iptables v1.6.1
$ iptables -A INPUT -s 140.113.0.0/16 -p tcp -m tcp -j RETURN
$ iptables -L INPUT
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
f2b-sshd   tcp  --  anywhere             anywhere             multiport
dports ssh
RETURN     tcp  --  not-a-legal-address/16  anywhere             tcp
$ iptables-save | grep 140.113
-A INPUT -s 140.113.0.0/16 -p tcp -m tcp -j RETURN

However, this is definitely a valid IP range. 140.113.0.0/16 is the valid
IP range in National Chiao Tung University in Taiwan. By the way, although
it's incorrectly parsed, the rule still seems to work properly.

Please let me know if you need other information. Thank you.

Sincerely,
bookgin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-netfilter-team/attachments/20190423/2cd0be78/attachment.html>