[gentoo-user] Strange behaviour of iptables

[Matthias Hanft <mh@hanft.de>]

Hi,

when I call

/usr/bin/iptables -L COUNT -n -v -x -w

from bash, everything works well - as it did for years.

When I call the same command from PHP:

exec("/usr/bin/iptables -L COUNT -n -v -x -w", $iptables);

I get (since this month) the message

iptables v1.8.11 (legacy): Illegal option `--numeric' with this command
Try `iptables -h' or 'iptables --help' for more information.

I think it has to do with "xtables-legacy-multi" (which is the
only entry of "eselect iptables list" and the softlink target
for all iptables* commands).

When I remove '-n' from the command line, the error message
changes to

iptables v1.8.11 (legacy): Illegal option `--exact' with this command
Try `iptables -h' or 'iptables --help' for more information.

So it seems that I can't use any parameters at all any more -
from PHP.

What's the trick to get this working again?

Thanks,

-Matt