https://bugzilla.redhat.com/show_bug.cgi?id=929426
--- Comment #12 from Eric Garver <egarver(a)redhat.com> ---
(In reply to Mai Ling from comment #8)
this is even more stupid. direct rules do not work with interface
'any', you
must explicitly set both physical interface name for input and output.
so "-i interface1 -o any" does not work! (tested on RHEL 7.5)
"-o any" attempts to match an output interface with name "any". If you
want to
match _any_ output interface, then omit the option. You can also use
wildcarding with "+". This is covered pretty thoroughly in the iptables man
page.
--
You are receiving this mail because:
You are the QA Contact for the bug.