search for: ipt_redirect

mdew:~# tc qdisc add dev imq0 handle 1: root htb default 12 r2q 1 Cannot find device "imq0" mdew:~# lsmod Module Size Used by Not tainted ipt_REDIRECT 728 0 (autoclean) ipt_MARK 728 2 (autoclean) iptable_mangle 2100 1 (autoclean) ipt_REJECT 2712 4 (autoclean) iptable_filter 1672 1 (autoclean) ip_nat_ftp 3760 0 (unused) ip_conntrack_ftp 3616 0 [ip_n...

...: kernel - 2.4.31 with patch-o-matic-ng, imq-nat.diff, linux-2.4.28-imq2.diff, iptables - v1.3.3 with iptables-1.3.0-imq1.diff vlan - iANS-3.4.3a, e100-3.4.14 lsmod: [...] Module Size Used by Tainted: P imq 1752 1 ipt_IMQ 800 0 ipt_REDIRECT 960 0 (autoclean) cls_fw 2368 0 (autoclean) cls_u32 4548 0 (autoclean) sch_sfq 3456 0 (autoclean) sch_htb 19040 0 (autoclean) ipt_ttl 640 0 (autoclean) ipt_state 608 0 (a...

I have had a web server listining sql-1433, www 80, ftp-21 using proxy arp with sub-netting in a three interface DMZ. All these ports are in the rules file as ACCEPT. With one exeception that 1433 allows a few host from the net. 21 and 80 allow all net to dmz connections. The policy is DMZ to net ACCEPT This has been working great for about a month or more until I rebooted the

...state 608 30 ipt_limit 960 0 (unused) ipt_unclean 6784 0 (unused) iptable_filter 1728 1 ipt_length 512 0 (unused) ipt_TOS 1024 12 ipt_TCPMSS 2368 0 (unused) ipt_REJECT 2784 4 ipt_REDIRECT 736 0 (unused) ipt_MASQUERADE 1216 0 (unused) ipt_LOG 3168 0 (unused) ip_nat_irc 2336 0 (unused) ip_nat_ftp 2944 0 (unused) iptable_nat 12980 3 [ipt_REDIRECT ipt_MASQUERADE ip_nat_irc ip_nat_ftp] ip_tables...

...OXY iptable_filter 12810 1 ip_tables 27473 4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter x_tables 29891 52 ebt_arp,ebt_ip,ip6table_filter,ebtables,xt_time,xt_connlimit,xt_realm,xt_addrtype,iptable_raw,xt_comment,xt_recent,xt_policy,ipt_ULOG,ipt_REJECT,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ipt_ECN,ipt_ecn,ipt_CLUSTERIP,ipt_ah,xt_set,xt_TPROXY,ip6_tables,xt_tcpmss,xt_pkttype,xt_physdev,xt_owner,xt_NFQUEUE,xt_NFLOG,xt_multiport,xt_mark,xt_mac,xt_limit,xt_length,xt_iprange,xt_helper,xt_hashlimit,xt_DSCP,xt_dscp,xt_dccp,xt_conntrack,xt_connmark,xt_CLASSIFY,xt_AU...

...gen 2 14:12:34 firewall atd: Avvio atd succeeded afther the boot .... [root@firewall log]# lsmod Module Size Used by Not tainted autofs 13348 0 (autoclean) (unused) ipt_TOS 1688 12 (autoclean) ipt_MASQUERADE 2232 1 (autoclean) ipt_REDIRECT 1400 1 (autoclean) ipt_unclean 7736 2 (autoclean) ipt_LOG 4184 8 (autoclean) ipt_REJECT 3736 4 (autoclean) ipt_TCPMSS 3064 1 (autoclean) ipt_state 1080 55 (autoclean) iptable_mangle 2808 1 (a...

...qb-storage kernel: Modules linked in: nfsd lockd nfs_acl auth_rpcgss sunrpc act_police cls_basic cls_flow cls_fw cls_u32 sch_tbf sch_prio sch_htb sch_hfsc sch_ingress sch_sfq bridge stp llc xt_statistic xt_time xt_connlimit xt_realm iptable_raw xt_comment xt_recent xt_policy ipt_ULOG ipt_REJECT ipt_REDIRECT ipt_NETMAP ipt_MASQUERADE ipt_ECN ipt_ecn ipt_CLUSTERIP ipt_ah ipt_addrtype xt_set ip_set nf_nat_tftp nf_nat_snmp_basic nf_conntrack_snmp nf_nat_sip nf_nat_pptp nf_nat_proto_gre nf_nat_irc nf_nat_h323 nf_nat_ftp nf_nat_amanda ts_kmp nf_conntrack_amanda nf_conntrack_sane nf_conntrack_tftp nf_co...

On Sat, Dec 24, 2005 at 11:03:36PM +0300, Andrey J. Melnikoff (TEMHOTA) wrote: > Hello. Hi Andrey, > Please, CC me, i'm not subscribed. > > Kernel 2.6.15-rc6 OOPS: > > kernel: general protection fault: 0000 [#1] > kernel: SMP > kernel: Modules linked in: ipt_REDIRECT ipt_LOG ipt_TOS ipt_TCPMSS ipt_tos > ip_nat_ftp ipt_tcpmss iptable_nat ip_nat iptable_mangle iptable_filter > ipt_multiport ipt_mac ipt_state ipt_limit ipt_conntrack ip_conntrack_ftp > ip_conntrack ip_tables af_packet ipv6 pcspkr floppy i2c_piix4 i2c_core > ohci_hcd usbcore aic7xxx sc...

...>> ip_tables 27473 4 >> iptable_raw,iptable_nat,iptable_mangle,iptable_filter >> x_tables 29891 52 >> ebt_arp,ebt_ip,ip6table_filter,ebtables,xt_time,xt_connlimit,xt_realm,xt_addrtype,iptable_raw,xt_comment,xt_recent,xt_policy,ipt_ULOG,ipt_REJECT,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ipt_ECN,ipt_ecn,ipt_CLUSTERIP,ipt_ah,xt_set,xt_TPROXY,ip6_tables,xt_tcpmss,xt_pkttype,xt_physdev,xt_owner,xt_NFQUEUE,xt_NFLOG,xt_multiport,xt_mark,xt_mac,xt_limit,xt_length,xt_iprange,xt_helper,xt_hashlimit,xt_DSCP,xt_dscp,xt_dccp,xt_conntrack,xt_connmark,xt_CLASSIFY,xt_AU...

...: NEW Severity: normal Priority: P2 Component: connection tracking AssignedTo: laforge@netfilter.org ReportedBy: laforge@netfilter.org CC: netfilter-buglog@lists.netfilter.org Hello, netfilter guys. We run transparent web caches using ipt_REDIRECT, and after upgrading to 2.4.20, found that conntrack table overflows after a week or so. Quick examination showed large number of entries in SYN_SENT state with super long timeouts exist. The offending change was in include/linux/list.h. list_del() now zeros prev and next pointer of list_head, wh...

...12810 1 > ip_tables 27473 4 > iptable_raw,iptable_nat,iptable_mangle,iptable_filter > x_tables 29891 52 > ebt_arp,ebt_ip,ip6table_filter,ebtables,xt_time,xt_connlimit,xt_realm,xt_addrtype,iptable_raw,xt_comment,xt_recent,xt_policy,ipt_ULOG,ipt_REJECT,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ipt_ECN,ipt_ecn,ipt_CLUSTERIP,ipt_ah,xt_set,xt_TPROXY,ip6_tables,xt_tcpmss,xt_pkttype,xt_physdev,xt_owner,xt_NFQUEUE,xt_NFLOG,xt_multiport,xt_mark,xt_mac,xt_limit,xt_length,xt_iprange,xt_helper,xt_hashlimit,xt_DSCP,xt_dscp,xt_dccp,xt_conntrack,xt_connmark,xt_CLASSIFY,xt_AU...

...i correct understand). This is parameter in > vz.conf: > > IPTABLES="iptable_filter iptable_mangle ipt_limit ipt_multiport ipt_tos > ipt_TOS ipt_REJECT ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_LOG ipt_length > ip_conntrack ipt_state ipt_helper iptable_nat ip_nat_ftp ip_nat_irc > ipt_REDIRECT xt_mac" > > On the host node all OK: > > vserver1 / # shorewall check > Checking... > Checking /etc/shorewall/zones... > Determining Hosts in Zones... > Preprocessing Action Files... > Pre-processing /usr/share/shorewall/action.Drop... > Pre-processin...

...04:07:15 localhost kernel: NETDEV WATCHDOG: eth0 (r8169): transmit queue 0 timed out Feb 1 04:07:15 localhost kernel: Modules linked in: tcp_diag inet_diag bluetooth rfkill bnx2fc fcoe libfcoe libfc 8021q scsi_transport_fc garp scsi_tgt stp llc sunrpc xt_recent xt_state xt_multiport iptable_filter ipt_REDIRECT ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 iptable_raw xt_MARK xt_socket nf_conntrack nf_defrag_ipv4 ip6_tables nf_defrag_ipv6 iptable_mangle ip_tables ext2 ppdev parport_pc parport serio_raw sg i2c_i801 snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep snd_seq snd_seq_device snd...

...tables 27473 4 >>> iptable_raw,iptable_nat,iptable_mangle,iptable_filter >>> x_tables 29891 52 >>> ebt_arp,ebt_ip,ip6table_filter,ebtables,xt_time,xt_connlimit,xt_realm,xt_addrtype,iptable_raw,xt_comment,xt_recent,xt_policy,ipt_ULOG,ipt_REJECT,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ipt_ECN,ipt_ecn,ipt_CLUSTERIP,ipt_ah,xt_set,xt_TPROXY,ip6_tables,xt_tcpmss,xt_pkttype,xt_physdev,xt_owner,xt_NFQUEUE,xt_NFLOG,xt_multiport,xt_mark,xt_mac,xt_limit,xt_length,xt_iprange,xt_helper,xt_hashlimit,xt_DSCP,xt_dscp,xt_dccp,xt_conntrack,xt_connmark,xt_CLASSIFY,xt_AU...

We have a (supposedly) quite standard setup: 2 Dom0 with drbd-on-lvm and a bunch of DomU, on Quad Xeon Dell servers. We tried with both sid-based and etch-based (+ 3.1 xen hypervisor and drbd 8 from backports.org ) Dom0, and quite consistently have "kernel: invalid opcode: 0000 [1] SMP" errors which freezes Dom0 (during lasts tests a simple start-and-stop loop of 10 DomU can trigger

...h_red.o sch_teql.o cls_route.o cls_u32.o sch_dsmark.o sch_ingress.o sch_sfq.o cls_rsvp.o sch_cbq.o sch_gred.o sch_prio.o sch_tbf.o [root@cab1 root]# [root@cab1 root]# ls /lib/modules/2.4.18/kernel/net/ipv4/netfilter/ ip_conntrack_egg.o iptable_nat.o ipt_MARK.o ipt_REDIRECT.o ip_conntrack_ftp.o ip_tables.o ipt_MASQUERADE.o ipt_REJECT.o ip_conntrack_h323.o ipt_ah.o ipt_MIRROR.o ipt_state.o ip_conntrack_irc.o ipt_conntrack.o ipt_mport.o ipt_string.o ip_conntrack.o ipt_dscp.o ipt_multiport.o ipt_tcpmss.o ip_con...

...y much all the iptables/netfilter modules on start up. The module has loaded okay as far as I can tell: root@gecko:~# lsmod | grep p2p ipt_ipp2p 8256 0 x_tables 15236 43 xt_comment,xt_policy,xt_multiport,ipt_ULOG,ipt_TTL,ipt_ttl,ipt_TOS,ipt_tos,ipt_SAME,ipt_REJECT,ipt_REDIRECT,ipt_recent,ipt_owner,ipt_NETMAP,ipt_MASQUERADE,ipt_LOG,ipt_iprange,ipt_ipp2p,ipt_ECN,ipt_ecn,ipt_ah,ipt_addrtype,xt_tcpmss,xt_pkttype,xt_physdev,xt_NFQUEUE,xt_NFLOG,xt_MARK,xt_mark,xt_mac,xt_limit,xt_length,xt_helper,xt_hashlimit,xt_dccp,xt_conntrack,xt_CONNMARK,xt_connmark,xt_CLASSIFY,xt_tcpudp,xt...

....ko ipt_SAME.ko ipt_ecn.ko ipt_length.ko ipt_multiport.ko ipt_state.ko iptable_filter.ko ip_conntrack_ftp.ko ip_nat_irc.ko ipt_NETMAP.ko ipt_ah.ko ipt_esp.ko ipt_limit.ko ipt_owner.ko ipt_tcpmss.ko iptable_mangle.ko ip_conntrack_irc.ko ip_nat_tftp.ko ipt_REDIRECT.ko ipt_conntrack.ko ipt_helper.ko ipt_mac.ko ipt_pkttype.ko ipt_tos.ko iptable_nat.ko ip_conntrack_tftp.ko ip_tables.ko ipt_REJECT.ko ipt_dscp.ko ipt_iprange.ko ipt_mark.ko ipt_recent.ko ipt_ttl.ko Should one of these modules be loaded to solve the problem?

...0:01:24 mega2 kernel: WARNING: at net/sched/sch_generic.c:261 dev_watchdog+0x26d/0x280() (Not tainted) May 23 00:01:24 mega2 kernel: Hardware name: X9SCL/X9SCM May 23 00:01:24 mega2 kernel: NETDEV WATCHDOG: eth0 (e1000e): transmit queue 0 timed out May 23 00:01:24 mega2 kernel: Modules linked in: ipt_REDIRECT xt_conntrack iptable_mangle nf_conntrack_ftp ipt_LOG xt_limit xt_multiport iptable_nat nf_nat bnx2fc fcoe libfcoe 8021q garp stp llc libfc scsi_transport_fc scsi_tgt sunrpc ipt_REJECT nf_conntrack_ipv4 nf_defrag_ipv4 iptable_filter ip_tables ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 xt_stat...

...-- Jun 20 03:08:38 Mail kernel: WARNING: at net/sched/sch_generic.c:261 dev_watchdog+0x26d/0x280() (Not tainted) Jun 20 03:08:38 Mail kernel: Hardware name: p7-1220 Jun 20 03:08:38 Mail kernel: NETDEV WATCHDOG: eth4 (r8169): transmit queue 0 timed out Jun 20 03:08:38 Mail kernel: Modules linked in: ipt_REDIRECT ipt_LOG xt_limit ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat xt_CHECKSUM iptable_mangle bridge autofs4 sunrpc bnx2fc cnic uio fcoe libfcoe libfc 8021q scsi_transport_fc garp stp llc scsi_tgt cpufreq_ondemand powernow_k8 freq_table mperf ipt_REJECT nf_conntrack_ipv4 nf_defrag_ipv4 iptable...