search for: xt_addrtyp

Shorewall 4.5.21.4 is now available for download. Problems corrected since 4.5.21.3: 1) The Broadcast actions have been corrected: o --dst-type BROADCAST has been removed from the IPv6 version o A superfluous DROP rule in the IPv4 version has been suppressed. 2) Previously, if an HFSC class was specified with dmax but not umax, then the firewall would fail to start with the

...lter 12815 0 ip6_tables 27864 2 ip6table_filter,xt_TPROXY iptable_filter 12810 1 ip_tables 27473 4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter x_tables 29891 52 ebt_arp,ebt_ip,ip6table_filter,ebtables,xt_time,xt_connlimit,xt_realm,xt_addrtype,iptable_raw,xt_comment,xt_recent,xt_policy,ipt_ULOG,ipt_REJECT,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ipt_ECN,ipt_ecn,ipt_CLUSTERIP,ipt_ah,xt_set,xt_TPROXY,ip6_tables,xt_tcpmss,xt_pkttype,xt_physdev,xt_owner,xt_NFQUEUE,xt_NFLOG,xt_multiport,xt_mark,xt_mac,xt_limit,xt_length,xt_iprange,xt_helper,xt...

...returned -28 kernel: Modules linked in: raid456 async_raid6_recov async_memcpy async_pq async_xor xor async_tx raid6_pq act_police cls_basic cls_flow cls_fw cls_u32 sch_tbf sch_prio sch_htb sch_hfsc sch_ingress sch_sfq xt_CHECKSUM ipt_rpfilter xt_statistic xt_CT xt_LOG xt_time xt_connlimit xt_realm xt_addrtype xt_comment xt_recent xt_policy xt_nat ipt_ULOG ipt_REJECT ipt_MASQUERADE ipt_ECN ipt_CLUSTERIP ipt_ah xt_set ip_set nf_nat _tftp nf_nat_snmp_basic nf_conntrack_snmp nf_nat_sip nf_nat_pptp nf_nat_proto_gre nf_nat_irc nf_nat_h323 nf_nat_ftp nf_conntrack_tftp nf_conntrack_sip nf_conntrack_proto_udpli...

...s yet. It was stable on 4.9*, including testing 4.9.15-22.el6.x86_64 Console output: [59826.069427] general protection fault: 0000 [#1] SMP [59826.069463] Modules linked in: xt_physdev br_netfilter xt_mac ebt_arp xen_pciback xen_gntalloc ebtable_filter ebtables bridge 8021q mrp garp stp llc xt_CT xt_addrtype iptable_raw nf_log_ ipv4 nf_log_common xt_LOG xt_limit xt_owner iptable_mangle iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat ip6t_REJECT nf_reject_ipv6 nf_conntrack_ipv6 nf_defrag_ipv6 xt_sta te nf_conntrack ip6table_filter ip6_tables blktap xen_netback xen_blkback xen_gntdev xen...

...7864 2 ip6table_filter,xt_TPROXY >> iptable_filter 12810 1 >> ip_tables 27473 4 >> iptable_raw,iptable_nat,iptable_mangle,iptable_filter >> x_tables 29891 52 >> ebt_arp,ebt_ip,ip6table_filter,ebtables,xt_time,xt_connlimit,xt_realm,xt_addrtype,iptable_raw,xt_comment,xt_recent,xt_policy,ipt_ULOG,ipt_REJECT,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ipt_ECN,ipt_ecn,ipt_CLUSTERIP,ipt_ah,xt_set,xt_TPROXY,ip6_tables,xt_tcpmss,xt_pkttype,xt_physdev,xt_owner,xt_NFQUEUE,xt_NFLOG,xt_multiport,xt_mark,xt_mac,xt_limit,xt_length,xt_iprange,xt_helper,xt...

...4 1 nf_reject_ipv4 16384 1 ipt_REJECT xt_comment 16384 4 nf_log_ipv4 16384 10 nf_log_common 16384 2 nf_log_ipv4,nf_log_ipv6 xt_LOG 16384 20 xt_multiport 16384 4 xt_limit 16384 21 xt_tcpudp 16384 18 xt_addrtype 16384 4 nf_conntrack_ipv4 16384 11 nf_defrag_ipv4 16384 1 nf_conntrack_ipv4 xt_conntrack 16384 22 ip6table_filter 16384 1 ip6_tables 28672 1 ip6table_filter nf_conntrack_netbios_ns 16384 0 nf_conntrack_broadcast 16384 1 nf_conntrac...

https://bugzilla.netfilter.org/show_bug.cgi?id=812 Florian Westphal <fw at strlen.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fw at strlen.de --- Comment #1 from Florian Westphal <fw at strlen.de> 2013-04-21 16:48:04 CEST ---

...CC| |netfilter at linuxace.com Resolution| |FIXED --- Comment #4 from Phil Oester <netfilter at linuxace.com> 2013-06-05 14:28:46 CEST --- This was fixed by Florian via 2a7851bf ("netfilter: add nf_ipv6_ops hook to fix xt_addrtype with IPv6"). Closing. -- Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

...ore: line 76 failed After debugging the rules manually I found the issue: ip6tables -A DROP_BROADCAST_AND_MCAST --match state --state NEW --match addrtype --dst-type BROADCAST --jump DROP ip6tables: Invalid argument. Run `dmesg' for more information. Running dmesg gives me: [636716.526815] xt_addrtype: ipv6 does not support BROADCAST matching If ip6tables-restore could pass the error from ip6tables that would be useful. I have not tested if this happens with iptables-restore -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An...

...tables 27864 2 ip6table_filter,xt_TPROXY > iptable_filter 12810 1 > ip_tables 27473 4 > iptable_raw,iptable_nat,iptable_mangle,iptable_filter > x_tables 29891 52 > ebt_arp,ebt_ip,ip6table_filter,ebtables,xt_time,xt_connlimit,xt_realm,xt_addrtype,iptable_raw,xt_comment,xt_recent,xt_policy,ipt_ULOG,ipt_REJECT,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ipt_ECN,ipt_ecn,ipt_CLUSTERIP,ipt_ah,xt_set,xt_TPROXY,ip6_tables,xt_tcpmss,xt_pkttype,xt_physdev,xt_owner,xt_NFQUEUE,xt_NFLOG,xt_multiport,xt_mark,xt_mac,xt_limit,xt_length,xt_iprange,xt_helper,xt...

Rowland, The computer name 'martin-RB042AV-ABA-a1410y' was set by Linux Mint when it was installed. I'm not sure I can change it. I check it on the Mint forum. I'll turn off the smb... feature and see what happens. Yes the ports listed below are open and set to pass through the firewall. Should I unset the netbios name". Going to try the modification to the ufw rules file as

...ter,xt_TPROXY >>> iptable_filter 12810 1 >>> ip_tables 27473 4 >>> iptable_raw,iptable_nat,iptable_mangle,iptable_filter >>> x_tables 29891 52 >>> ebt_arp,ebt_ip,ip6table_filter,ebtables,xt_time,xt_connlimit,xt_realm,xt_addrtype,iptable_raw,xt_comment,xt_recent,xt_policy,ipt_ULOG,ipt_REJECT,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ipt_ECN,ipt_ecn,ipt_CLUSTERIP,ipt_ah,xt_set,xt_TPROXY,ip6_tables,xt_tcpmss,xt_pkttype,xt_physdev,xt_owner,xt_NFQUEUE,xt_NFLOG,xt_multiport,xt_mark,xt_mac,xt_limit,xt_length,xt_iprange,xt_helper,xt...

...blackgate kernel: WARNING: CPU: 6 PID: 138 at drivers/gpu/drm/nouveau/nvkm/engine/gr/gf100.c:1501 gf100_gr_init_ctxctl+0x81f/0x9a0 [nouveau] čen 23 22:11:05 blackgate kernel: Modules linked in: xt_nat veth xfs ipt_MASQUERADE nf_nat_masquerade_ipv4 nf_conntrack_netlink nfnetlink xfrm_user xfrm_algo xt_addrtype br_netfilter bridge stp llc tun dm_thin_pool dm_persistent_data dm_bi o_prison dm_bufio loop ecryptfs cbc encrypted_keys trusted ctr ccm cmac rfcomm pci_stub vboxpci(O) xt_tcpudp iptable_filter iptable_nat nf_conntrack_ipv6 nf_conntrack_ipv4 nf_defrag_ipv4 nf_defrag_ipv6 nf_nat_ipv4 xt_conntrack n...

...67 PMD 0 [ 2643.920483] Oops: 0000 [#1] PREEMPT SMP [ 2643.920487] Modules linked in: act_police cls_basic cls_flow cls_fw cls_u32 sch_fq_codel sch_tbf sch_prio sch_htb sch_hfsc sch_sfq arptable_filter arp_tables xt_CHECKSUM ipt_rpfilter xt_geoip(O) xt_statistic xt_CT xt_LOG xt_connlimit xt_realm xt_addrtype xt_comment xt_recent ipt_ULOG ipt_MASQUERADE ipt_ECN ipt_CLUSTERIP ipt_ah xt_set nf_nat_tftp nf_nat_snmp_basic nf_conntrack_snmp nf_nat_sip nf_nat_pptp nf_nat_proto_gre nf_nat_irc nf_nat_h323 nf_nat_ftp nf_nat_amanda ts_kmp nf_conntrack_amanda nf_conntrack_sane nf_conntrack_tftp nf_conntrack_sip n...

...4 1 nf_reject_ipv4 16384 1 ipt_REJECT xt_comment 16384 4 nf_log_ipv4 16384 10 nf_log_common 16384 2 nf_log_ipv4,nf_log_ipv6 xt_LOG 16384 20 xt_multiport 16384 4 xt_limit 16384 21 xt_tcpudp 16384 18 xt_addrtype 16384 4 nf_conntrack_ipv4 16384 11 nf_defrag_ipv4 16384 1 nf_conntrack_ipv4 xt_conntrack 16384 22 ip6table_filter 16384 1 ip6_tables 28672 1 ip6table_filter nf_conntrack_netbios_ns 16384 0 nf_conntrack_broadcast 16384 1 nf_conntrac...

On Mon, 17 Jul 2017, Johnny Hughes wrote: > Are the testing kernels (kernel-4.9.37-29.el7 and kernel-4.9.37-29.el6, > with the one config file change) working for everyone: > > (turn off: CONFIG_IO_STRICT_DEVMEM) Hello. Maybe it's not the most appropriate thread or time, but I have been signalling it before: 4.9.* kernels do not work well for me any more (and for other people

...[56953.400946] IP: [<ffffffffa0426b19>] nouveau_fence_wait_uevent.isra.5+0x19/0x450 [nouveau] [56953.400984] PGD d1cf2067 PUD d2ac8067 PMD 0 [56953.400998] Oops: 0000 [#1] PREEMPT SMP [56953.401010] Modules linked in: xt_CHECKSUM ipt_rpfilter xt_statistic xt_CT xt_LOG xt_connlimit xt_realm xt_addrtype xt_comment xt_recent xt_nat ipt_ULOG ipt_REJECT ipt_MASQUERADE ipt_ECN ipt_ah xt_set ip_set nf_nat_tftp nf_nat_sip nf_nat_pptp nf_nat_proto_gre nf_nat_irc nf_nat_h323 nf_nat_ftp nf_nat_amanda ts_kmp nf_conntrack_amanda nf_conntrack_sane nf_conntrack_tftp nf_conntrack_sip nf_conntrack_proto_udplite...

Is there any problem moving to 4.9.31? This contains upstream commits f2e767bb5d6ee0d9 for mpt3sas and 69861e0a52f87333 for dom0 memory mappings. I am also trying to build a debuginfo package but it's not correct. Specifically I'm able to get vmlinux but the .debug files for modules are stripped, which isn't right. Does anyone know how to fix this? I'm also not sure how

...40960 2 iptable_nat,xt_MASQUERADE iptable_filter 16384 1 ipt_REJECT 16384 0 nf_reject_ipv4 16384 1 ipt_REJECT ip_tables 32768 2 iptable_filter,iptable_nat x_tables 40960 9 xt_conntrack,iptable_filter,xt_LOG,xt_string,xt_tcpudp,xt_addrtype,ipt_REJECT,ip_tables,xt_MASQUERADE + echo POST + nc -w10 example.com 80 HTTP/1.0 501 Not Implemented Content-Type: text/html Content-Length: 357 Connection: close Date: Wed, 11 Dec 2019 12:43:33 GMT Server: ECSF (nyb/1D24) <?xml version="1.0" encoding="iso-8859-1"?> <...

...00 R15: 0000000000000000 Jul 8 16:34:17 localhost kernel: [222252.785716] Modules linked in: tun nls_ascii nls_cp437 vfat fat mmc_block uas usb_storage ctr ccm hid_generic usbhid hid udp_diag tcp_diag inet_diag xt_mark xt_NFQUEUE nfnetlink_queue veth xt_nat nf_conntrack_netlink xfrm_user xfrm_algo xt_addrtype xt_conntrack br_netfilter overlay xt_CHECKSUM nft_chain_nat xt_MASQUERADE nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nft_counter vboxnetadp(OE) vboxnetflt(OE) xt_tcpudp nft_compat vboxdrv(OE) bridge stp llc nf_tables nfnetlink fuse uinput binfmt_misc intel_rapl_msr intel_rapl_common mei_wdt...