search for: buglog

...myip_v6 . udp } jump global_dns_in ^^^^^^^^ -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20191010/b5822c23/attachment.html>

...ts when committing external caches Product: conntrack-tools Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: conntrack-daemon Assignee: netfilter-buglog at lists.netfilter.org Reporter: ralf at os-s.de Hi, I have a setup based on Ubuntu 18.10 using conntrackd and keepalived for a ha-firewall. When stress-testing the system by stopping and starting keepalived eventually the conntrackd segfaults. Nov 4 15:29:46 host conntrackd[1122]: [Mon...

...n the first population, and that the overall reliability is commensurate with that of ipset. -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20191230/c7297ac1/attachment.html>

...to keep track of the ones that matter and perhaps close some of the ones that are obsolete. -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200829/162d1f46/attachment-0001.html>

...x due to conflicting definitions Product: iptables Version: unspecified Hardware: x86_64 OS: other Status: NEW Severity: blocker Priority: P5 Component: unknown Assignee: netfilter-buglog at lists.netfilter.org Reporter: camerontnorman at gmail.com Created attachment 546 --> https://bugzilla.netfilter.org/attachment.cgi?id=546&action=edit Void Linux x86_64 build log Build log is attached. -- You are receiving this mail because: You are watching all bug changes...

...Include nested too deeply, max 16 levels include "./rules/*" ^^^^^^^^^^^^^^^^^^^^ -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20180414/699a823c/attachment.html>

...mary: Window Tracking not disabled Product: conntrack-tools Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: conntrack-daemon Assignee: netfilter-buglog at lists.netfilter.org Reporter: mat999 at gmail.com Hi, I have been conducting testing and I noticed that Window Tracking does not appear to be disabled on a per connection level upon receipt. Kernel: 4.1.17 Version: v1.4.3 To Replicate: First ensure Configuration contains "TCP...

...h don't support Path MTU Discovery mechanism correctly and in networks behind PPPoE etc. -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20160320/07de55d8/attachment.html>

...: 1152 Summary: iptables-xml crashed on -D rules Product: iptables Version: 1.4.x Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: unknown Assignee: netfilter-buglog at lists.netfilter.org Reporter: ivan.agarkov at gmail.com [root at server ~]# cat /etc/iptables.post *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [5103:1388026] -D INPUT -p tcp --dport 2200 -j ACCEPT [root at server ~]# gdb /usr/bin/iptables-xml GNU gdb (GDB) Red H...

...s with certian kconfig options set Product: iptables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: normal Priority: P5 Component: iptables Assignee: netfilter-buglog at lists.netfilter.org Reporter: mthode at mthode.org I have not narrowed it down yet, but have been able to narrow it down to differing kconfigs. stracing gives me this failure getsockopt(4, SOL_IP, IPT_SO_GET_INFO, 0x7fff867b2ba0, [84]) = -1 ECHILD (No child processes) and this when...

.../service has multiple ports for service, nft should get correct port. Best regards, Severus -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20170526/aabf9a8a/attachment.html>

...55.255.255.255-255.255.255.255 which is rejected as: Error: Range has zero or negative size -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20171023/eac34b14/attachment.html>

...Summary: Replace 'netstat' with 'ss' Product: ipset Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: default Assignee: netfilter-buglog at lists.netfilter.org Reporter: kstreitova at suse.com Since the 'netstat' command is deprecated I suggest replacing it with 'ss' command in tests/runtest.sh file. I'm adding a simple patch: Index: ipset-6.34/tests/runtest.sh ======================================...

...contains wildcard character Product: iptables Version: CVS (please indicate timestamp) Hardware: All OS: All Status: NEW Severity: trivial Priority: P5 Component: iptables Assignee: netfilter-buglog at lists.netfilter.org Reporter: netfilterbugzilla at s.cdmweb.de When I try to match on an interface with illegal characters (e.g. whitespace or /), I get a warning, as expected: # iptables -A FORWARD -i "asd f" Warning: weird character in interface `asd f' ('/' a...

...ork, so this is not a usability issue, but I think a bug is a bug. Thank you for your time. -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200527/3872c9c7/attachment.html>

...rk with conntrack-tools 1.4.5 Product: conntrack-tools Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: conntrack Assignee: netfilter-buglog at lists.netfilter.org Reporter: ronald.wahl at raritan.com Created attachment 537 --> https://bugzilla.netfilter.org/attachment.cgi?id=537&action=edit Make family filtering work again I found a bug in conntrack-tools 1.4.5 "conntrack -L -f ipv4" respective "con...

...saddr vmap { 10.0.1.0-10.0.1.255 : accept, 10.0.2.0-10.0.2.255 : drop } -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200405/b220d735/attachment.html>

.../ delete rules in raw table Product: iptables Version: 1.6.x Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: major Priority: P5 Component: iptables Assignee: netfilter-buglog at lists.netfilter.org Reporter: champetier.etienne at gmail.com See repro steps, I can create a rule in raw table but can't check / delete it # cat /etc/debian_version bullseye/sid # apt info iptables Package: iptables Version: 1.8.4-3 ... # /sbin/iptables --version iptables v1....

...log. Tried a few times with a fresh/clean git work-tree but the issue reproduced repeatedly. -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20201115/f90d15dd/attachment.html>

...^^^^^^^^^^ Without this feature I have to use iptables. :-( -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20191108/70414c02/attachment.html>