search for: xt_conntrack

...1 ext4, mac80211 313896 1 b43, mbcache 3949 1 ext4, md4 3552 0 md5 1664 0 nf_conntrack 44251 13 nf_conntrack_ipv6,nf_nat_irc,nf_nat_ftp,nf_conntrack_irc,nf_conntrack_ftp,ipt_MASQUERADE,iptable_nat,nf_nat_ipv4,nf_nat,xt_conntrack,xt_CT,xt_state,nf_conntrack_ipv4, nf_conntrack_ftp 5104 1 nf_nat_ftp, nf_conntrack_ipv4 4676 4 nf_conntrack_ipv6 5488 3 nf_conntrack_irc 2800 1 nf_nat_irc, nf_defrag_ipv4 742 1 nf_conntrack_ipv4, nf_defrag_ipv6 8865 1 nf_conntrack_ipv6, nf_nat...

Hello, I'm having problem setting up filtering traffic for a virtual machine managed by libvirt. Strange thing is, such a setup has been working fine for me on an older version of distro (namely, opensuse 11.3 w/updates, kernel 2.6.34, libvirt 0.8.8) but refused to work on shiny new opensuse 12.4 (kernel 3.7.10, libvirt 1.0.2). The definition of filter in question is pretty simple:

...313896 1 b43, >mbcache 3949 1 ext4, >md4 3552 0 >md5 1664 0 >nf_conntrack 44251 13 >nf_conntrack_ipv6,nf_nat_irc,nf_nat_ftp,nf_conntrack_irc,nf_conntrack_ftp,ipt_MASQUERADE,iptable_nat,nf_nat_ipv4,nf_nat,xt_conntrack,xt_CT,xt_state,nf_conntrack_ipv4, >nf_conntrack_ftp 5104 1 nf_nat_ftp, >nf_conntrack_ipv4 4676 4 >nf_conntrack_ipv6 5488 3 >nf_conntrack_irc 2800 1 nf_nat_irc, >nf_defrag_ipv4 742 1 nf_conntrack_ipv4, >nf_defrag_ipv6 8865 1 nf_con...

..._log_common 16384 2 nf_log_ipv4,nf_log_ipv6 xt_LOG 16384 20 xt_multiport 16384 4 xt_limit 16384 21 xt_tcpudp 16384 18 xt_addrtype 16384 4 nf_conntrack_ipv4 16384 11 nf_defrag_ipv4 16384 1 nf_conntrack_ipv4 xt_conntrack 16384 22 ip6table_filter 16384 1 ip6_tables 28672 1 ip6table_filter nf_conntrack_netbios_ns 16384 0 nf_conntrack_broadcast 16384 1 nf_conntrack_netbios_ns nf_nat_irc 16384 0 nf_conntrack_irc 16384 1 nf_nat_irc nf_nat_ftp 16384...

Rowland, The computer name 'martin-RB042AV-ABA-a1410y' was set by Linux Mint when it was installed. I'm not sure I can change it. I check it on the Mint forum. I'll turn off the smb... feature and see what happens. Yes the ports listed below are open and set to pass through the firewall. Should I unset the netbios name". Going to try the modification to the ufw rules file as

...b43, >>mbcache 3949 1 ext4, >>md4 3552 0 >>md5 1664 0 >>nf_conntrack 44251 13 >>nf_conntrack_ipv6,nf_nat_irc,nf_nat_ftp,nf_conntrack_irc,nf_conntrack_ftp,ipt_MASQUERADE,iptable_nat,nf_nat_ipv4,nf_nat,xt_conntrack,xt_CT,xt_state,nf_conntrack_ipv4, >>nf_conntrack_ftp 5104 1 nf_nat_ftp, >>nf_conntrack_ipv4 4676 4 >>nf_conntrack_ipv6 5488 3 >>nf_conntrack_irc 2800 1 nf_nat_irc, >>nf_defrag_ipv4 742 1 nf_conntrack_ipv4, >>nf_defrag_ipv6...

[CC'ing the list] On Feb 23, 2014, at 3:06 PM, Tim Dawson wrote: > I don't think USB support is a given in OpwnWRT - some builds have it, some don't, and some are just a bit wonky. > Most USB builds support USB disk - the USB serial driver is a different beast, and even if one is there does not imply the other. > > I'd be interested in the output of 'lsmod',

..._log_common 16384 2 nf_log_ipv4,nf_log_ipv6 xt_LOG 16384 20 xt_multiport 16384 4 xt_limit 16384 21 xt_tcpudp 16384 18 xt_addrtype 16384 4 nf_conntrack_ipv4 16384 11 nf_defrag_ipv4 16384 1 nf_conntrack_ipv4 xt_conntrack 16384 22 ip6table_filter 16384 1 ip6_tables 28672 1 ip6table_filter nf_conntrack_netbios_ns 16384 0 nf_conntrack_broadcast 16384 1 nf_conntrack_netbios_ns nf_nat_irc 16384 0 nf_conntrack_irc 16384 1 nf_nat_irc nf_nat_ftp 16384...

...fter xen_acpi_processor_resume+0x0/0x34 [xen_acpi_processor] [48002.776836] Modules linked in: tcp_lp btrfs zlib_deflate raid6_pq xor ufs hfsplus hfs minix vfat msdos fat jfs xfs libcrc32c reiserfs xt_CHECKSUM tun hidp fuse nf_conntrack_ netbios_ns nf_conntrack_broadcast ipt_MASQUERADE ip6t_REJECT xt_conntrack ebtable_nat eb table_broute bridge stp llc ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_de frag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6 _tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack ipt able_mangle iptab...

...xt_policy,ipt_ULOG,ipt_REJECT,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ipt_ECN,ipt_ecn,ipt_CLUSTERIP,ipt_ah,xt_set,xt_TPROXY,ip6_tables,xt_tcpmss,xt_pkttype,xt_physdev,xt_owner,xt_NFQUEUE,xt_NFLOG,xt_multiport,xt_mark,xt_mac,xt_limit,xt_length,xt_iprange,xt_helper,xt_hashlimit,xt_DSCP,xt_dscp,xt_dccp,xt_conntrack,xt_connmark,xt_CLASSIFY,xt_AUDIT,ipt_LOG,xt_tcpudp,xt_state,iptable_nat,iptable_mangle,iptable_filter,ip_tables Guest network using bridge: <interface type='bridge'> <mac address='00:11:22:33:44:55'/> <source bridge='brdg'/> <model type='virti...

2014-02-23 17:57 GMT+01:00 Charles Lepple <clepple at gmail.com>: > On Feb 22, 2014, at 9:51 AM, Josu Lazkano wrote: > >> The problem is that I don't know where to configure it. >> >> Anyone with a UPS connect to a OpenWRT device? > > What version of OpenWRT? > > I haven't tried this myself, but it looks like recent versions of OpenWRT use UCI,

...proto_gre nf_conntrack_netlink nf_conntrack_netbios_ns nf_conntrack_broadcast nf_conntrack_irc nf_conntrack_h323 nf_conntrack_ftp xt_tcpmss xt_pkttype xt_owner xt_NFQUEUE xt_NFLOG nfnetlink_log xt_multiport xt_mar k xt_mac xt_limit xt_length xt_iprange xt_helper xt_hashlimit xt_DSCP xt_dscp xt_dccp xt_conntrack xt_connmark xt_CLASSIFY xt_AUDIT xt_tcpudp xt_state iptable_raw iptable_nat nf_nat_ipv4 nf_nat nf_conntrack_ipv4 nf_defrag_i pv4 nf_conntrack iptable_mangle nfnetlink iptable_filter ip_tables x_tables bridge stp llc rtc snd_hda_codec_realtek fbcon bitblit softcursor font nouveau video mxm_wmi cfbfi...

...he patch? The backtrace is as follows: [ 32.304666] ------------[ cut here ]------------ [ 32.304679] kernel BUG at arch/x86/kernel/paravirt.c:252! [ 32.304683] invalid opcode: 0000 [#1] SMP [ 32.304687] Modules linked in: ip6t_rpfilter ipt_REJECT nf_reject_ipv4 ip6t_REJECT nf_reject_ipv6 xt_conntrack ip_set nfnetlink ebtable_nat ebtable_broute bridge stp llc ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw ebtable_filter...

...Sun-Fire-T1000 Linux mail 3.2.0-4-sparc64-smp #1 SMP Debian 3.2.63-2+deb7u2 sparc64 GNU/Linux ip_tables: (C) 2000-2006 Netfilter Core Team nf_conntrack version 0.5.0 (16384 buckets, 65536 max) [90297.014493] BUG: soft lockup - CPU#9 stuck for 22s! [iptables:9251] [90297.014690] Modules linked in: xt_conntrack xt_multiport nf_conntrack_ipv4 nf_defrag_ipv4 xt_tcpudp xt_state nf_conntrack iptable_filter ip_tables x_tables nfsd nfs nfs_acl auth_rpcgss fscache lockd sunrpc ext2 loop flash ext4 crc16 jbd2 mbcache raid1 md_mod dm_mirror dm_region_hash dm_log dm_mod sg sd_mod crc_t10dif mptsas scsi_transport_sa...

...47.237658] btrfs: block rsv returned -28 [ 347.237661] ------------[ cut here ]------------ [ 347.237667] WARNING: at fs/btrfs/extent-tree.c:6297 btrfs_alloc_free_block+0x399/0x3a0() [ 347.237668] Hardware name: GA-MA74GM-S2H [ 347.237669] Modules linked in: fuse xt_pkttype af_packet ipt_REJECT xt_conntrack iptable_raw xt_CT iptable_filter nf _conntrack_netbios_ns nf_conntrack_broadcast nf_conntrack_ipv4 nf_conntrack nf_defrag_ipv4 ip_tables x_tables cpufreq_c onservative cpufreq_userspace cpufreq_powersave acpi_cpufreq mperf sp5100_tco usb_storage kvm_amd kvm snd_hda_codec_rea ltek k10temp edac_core...

...s follows: > > [ 32.304666] ------------[ cut here ]------------ > [ 32.304679] kernel BUG at arch/x86/kernel/paravirt.c:252! > [ 32.304683] invalid opcode: 0000 [#1] SMP > [ 32.304687] Modules linked in: ip6t_rpfilter ipt_REJECT nf_reject_ipv4 > ip6t_REJECT nf_reject_ipv6 xt_conntrack ip_set nfnetlink ebtable_nat > ebtable_broute bridge stp llc ip6table_nat nf_conntrack_ipv6 > nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw > iptable_nat > nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack > iptable_mangle iptable_security i...

....2 guest and a ubuntu vm but in that case just after the fault the guest reboots itself. What could be the problem here? Any help is very appreciated. Thanks, Daniel [ 77.538312] general protection fault: 0000 [#1] SMP [ 77.539235] Modules linked in: ip6t_rpfilter ip6t_REJECT nf_reject_ipv6 xt_conntrack ip_set nfnetlink vboxpci(OE) vboxnetadp(OE) vboxnetflt(OE) ebtable_broute bridge stp llc ebtable_filter ebtable_nat ebtables ip6table_mangle ip6table_security ip6table_raw ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_filter ip6_tables iptable_mangle iptable_security iptable_ra...

...rack 59734 39 nf_nat_ftp,nf_nat_irc,nf_nat_sip,nf_nat_amanda,xt_CT,nf_nat_snmp_basic,nf_conntrack_netbios_ns,nf_conntrack_proto_gre,xt_helper,ipt_MASQUERADE,nf_conntrack_proto_udplite,nf_nat,ip6t_MASQUERADE,xt_state,xt_connlimit,nf_nat_h323,nf_nat_ipv4,nf_nat_ipv6,nf_nat_pptp,nf_nat_tftp,xt_conntrack,nf_conntrack_amanda,ipt_CLUSTERIP,nf_conntrack_proto_sctp,nf_conntrack_netlink,ip6table_nat,nf_conntrack_broadcast,xt_connmark,nf_conntrack_ftp,nf_conntrack_irc,nf_conntrack_sip,iptable_nat,nf_conntrack_h32,nf_conntrack_ipv4,nf_conntrack_ipv6,nf_conntrack_pptp,nf_conntrack_sane,nf_conntrack_snmp,nf...

...conntrack_h323 nf_conntrack_ftp xt_TPROXY nf_tproxy_core nf_defrag_ipv6 xt_tcpmss xt_pkttype xt_physdev xt_owner xt_NFQUEUE xt_NFLOG nfnetlink_log xt_multiport xt_MARK xt_mark xt_mac xt_limit xt_length xt_iprange xt_help Jan 30 09:46:13 qb-storage kernel: er xt_hashlimit xt_DSCP xt_dscp xt_dccp xt_conntrack xt_CONNMARK xt_connmark xt_CLASSIFY xt_AUDIT ipt_LOG xt_state iptable_nat nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_conntrack iptable_mangle nfnetlink iptable_filter ip_tables ipv6 xfs exportfs microcode power_meter iTCO_wdt iTCO_vendor_support dcdbas sg bnx2 lpc_ich mfd_core usb_storage ext4...

...w_callback+0x9a/0xc0() Jul 21 10:11:42 dioo-XPS kernel: [ 2185.090329] Watchdog detected hard LOCKUP on cpu 5 Jul 21 10:11:42 dioo-XPS kernel: [ 2185.090330] Modules linked in: ipt_MASQUERADE(E) nf_nat_masquerade_ipv4(E) iptable_nat(E) nf_nat_ipv4(E) nf_nat(E) nf_conntrack_ipv4(E) nf_defrag_ipv4(E) xt_conntrack(E) nf_conntrack(E) ipt_REJECT(E) nf_reject_ipv4(E) xt_CHECKSUM(E) iptable_mangle(E) xt_tcpudp(E) bridge(E) stp(E) llc(E) ip6table_filter(E) ip6_tables(E) iptable_filter(E) ip_tables(E) ebtable_nat(E) ebtables(E) x_tables(E) arc4(E) md4(E) nls_utf8(E) cifs(E) fscache(E) bnep(E) rfcomm(E) binfmt_misc...