Displaying 6 results from an estimated 6 matches for "chain1".
Did you mean:
chain
2019 Nov 12
6
[Bug 1382] New: nftables.py cmd leaking memory when ruleset contain mapping ip length to range with high limit 65535
....org/attachment.cgi?id=574&action=edit
example of nftables.py leaking memory
System:
Gentoo 5.3.10 x86_64
nft up to date from GIT as of 12.11.2019
Overwiew:
nft commands which change ruleset leak memory when running through nftables.py
if ruleset contain rule like this:
add rule ip table1 chain1 counter name ip length map { 0-65535: "counter1" }
But no leaking happens when rule is changed to:
add rule ip table1 chain1 counter name ip length map { 0-65534: "counter1" }
Detailed info:
Consider this ruleset:
add table ip table1
add set ip table1 set1 { type ipv4_addr...
2006 Apr 09
0
Simultaneous iptables calls
Run this as one process:
#!/bin/sh
while [ 1 = 1 ]; do
iptables -t mangle -F chain1
iptables -t mangle -X chain1
iptables -t mangle -N chain1 || exit 1
done
Run this as another process:
#!/bin/sh
while [ 1 = 1 ]; do
iptables -t mangle -F chain2
iptables -t mangle -X chain2
iptables -t mangle -N chain2 || exit 1
done
and you get:
iptables: No chain/target/ma...
2003 Mar 23
12
Shorewall 1.4.1
This is a minor release of Shorewall.
WARNING: This release introduces incompatibilities with prior releases.
See http://www.shorewall.net/upgrade_issues.htm.
Changes are:
a) There is now a new NONE policy specifiable in
/etc/shorewall/policy. This policy will cause Shorewall to assume that
there will never be any traffic between the source and destination
zones.
b) Shorewall no longer
2019 Dec 04
4
[Bug 1386] New: nftables.py cmd doesn't read updated counter values after first read
...from GIT as of 4.12.2019
CPython 3.6.9
Overview:
nft commands which read named counters actually read counter values only first
time, subsequent reads returns values from first read.
Detailed info:
Consider this ruleset:
add table ip table1
add counter ip table1 counter1
add chain ip table1 chain1 { type filter hook input priority 0; }
add rule ip table1 chain1 counter name counter1
Then ping several times localhost, after that call nftables.py cmd:
list counter table1 counter1
and you will see some packets added to this counter. Ping localhost several
times again and call nftables.py cmd...
2004 Aug 19
9
bridging and internet
(I''m not a member of the list at the moment so please answer this e-mail CC to
my personal address. Thank you all)
I am part of a community network in Buenos Aires and I''m now trying to
set up a bridge between my local net and the community net.
The problem is that appart from the bridge between these I need to share
an internet connection and the cable modem assigns me a
2005 Feb 01
4
Shorewall problem
I am getting the following message when Shorewall stops can anybody shed
any light on this message and where I should be looking? Thanks
root@bobshost:~# shorewall stop
Loading /usr/share/shorewall/functions...
Processing /etc/shorewall/params ...
Processing /etc/shorewall/shorewall.conf...
Loading Modules...
Stopping Shorewall...Processing /etc/shorewall/stop ...
IP Forwarding Enabled