search for: ojea

Displaying 8 results from an estimated 8 matches for "ojea".

Did you mean: joea
2020 Jun 22
3
[Bug 1435] New: segfault when using iptables-nft and iptables-legacy inside a container
...ontainer Product: libnftnl Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: libnftnl Assignee: pablo at netfilter.org Reporter: antonio.ojea.garcia at gmail.com Created attachment 594 --> https://bugzilla.netfilter.org/attachment.cgi?id=594&action=edit coredump ip6tables I can not reproduce the issue on demand, but it happens in a CI system that runs containers, and some of them uses iptables-nft inside of the namespace , how...
2023 Dec 18
4
[Bug 1728] New: Regression: iptables lock is now waited for without --wait
https://bugzilla.netfilter.org/show_bug.cgi?id=1728 Bug ID: 1728 Summary: Regression: iptables lock is now waited for without --wait Product: iptables Version: 1.8.x Hardware: x86_64 OS: All Status: NEW Severity: normal Priority: P5 Component: unknown
2024 Jan 06
8
[Bug 1730] New: nft does not handle IPv6 addresses with embedded IPv4 addresses
...addresses Product: nftables Version: 1.0.x Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: antonio.ojea.garcia at gmail.com Originally reported by Lars Ekman in Kubernetes https://github.com/kubernetes/kubernetes/issues/122611 , all credit to him The rfc5952 seems to accept "embedded ipv4" addresses, and iptables accept them, however, nft does not This works ip6tables -A INPUT -s fd00::...
2024 Apr 03
9
[Bug 1742] New: using nfqueue breaks SCTP connection (tracking)
...libnetfilter_queue Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: libnetfilter_queue Assignee: netfilter-buglog at lists.netfilter.org Reporter: antonio.ojea.garcia at gmail.com I'm using a golang library for interacting with nfqueue, it is a very simple logic, I add the following rule table inet kube-netpol { comment "rules for kubernetes NetworkPolicy" chain forward { type filter hook forward priority fi...
2024 Apr 07
0
[Bug 1476] xtables-monitor --trace segfaults running inside a container
https://bugzilla.netfilter.org/show_bug.cgi?id=1476 Antonio Ojea <antonio.ojea.garcia at gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |MOVED --...
2024 Apr 07
0
[Bug 1595] conntrack resumes closed NAT connection despite rules no longer exist
https://bugzilla.netfilter.org/show_bug.cgi?id=1595 Antonio Ojea <antonio.ojea.garcia at gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |WORKSFORM...
2020 May 21
2
[Bug 1427] New: can not reuse source port to a DNATed IP if it is being used by another connection
...Product: netfilter/iptables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: normal Priority: P5 Component: NAT Assignee: netfilter-buglog at lists.netfilter.org Reporter: antonio.ojea.garcia at gmail.com Scenario: There is one established connection IP1:Port1 -> IP2:Port2 There is a DNAT rule like IP3:Port3 -> IP2:Port2 If a new connection is created from IP1 to IP3:Port3, and this connection has source port Port1, the connection can not be established, because the inco...
2020 Oct 14
0
[Bug 1476] New: xtables-monitor --trace segfaults running inside a container
...roduct: bugzilla Version: other Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: netfilter bugzilla Assignee: netfilter-buglog at lists.netfilter.org Reporter: antonio.ojea.garcia at gmail.com Created attachment 610 --> https://bugzilla.netfilter.org/attachment.cgi?id=610&action=edit xtrace-monitor coredump Server: CentOS Linux release 8.2.2004 (Core) iptables v1.8.4 (nf_tables) docker-ce-19.03.13-3.el7.x86_64 docker-ce-cli-19.03.13-3.el7.x86_64 kind v0.9.0...