search for: xt_physdev

I am planning to schedule a monthly XCP meeting for the community and am struggling with when to host the call. As we are a global community, there is no single optimal time to host the meeting. In an effort to support the most likely attendees, please send me your time zone if you plan to participate in these calls. I will track the most common time zones in an effort to maximize attendance. All

I am planning to schedule a monthly XCP meeting for the community and am struggling with when to host the call. As we are a global community, there is no single optimal time to host the meeting. In an effort to support the most likely attendees, please send me your time zone if you plan to participate in these calls. I will track the most common time zones in an effort to maximize attendance. All

...37963] block drbd0: 0 KB (0 bits) marked out-of-sync by on disk bit-map. [257199.344910] block drbd2: role( Primary -> Secondary ) [257199.344992] block drbd2: bitmap WRITE of 0 pages took 0 jiffies [257199.345042] block drbd2: 0 KB (0 bits) marked out-of-sync by on disk bit-map. [257199.345709] xt_physdev: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [257199.345796] xt_physdev: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [257199.349213] xt_physdev: using --ph...

...02) xenmeister:~# cat /boot/grub/menu.lst | grep 00:06.0 # xenkopt=console=tty0 pciback.hide=(00:06.0) module /boot/vmlinuz-2.6.18-5-xen-vserver-686 root=/dev/md0 ro console=tty0 pciback.hide=(00:06.0) xenmeister:~# lsmod Module Size Used by xt_tcpudp 3904 4 xt_physdev 3792 8 iptable_filter 3872 1 ip_tables 13892 1 iptable_filter x_tables 14084 3 xt_tcpudp,xt_physdev,ip_tables bridge 50300 1 xt_physdev netloop 7360 0 raid456 116496 1 xor 15144...

...0 11:48:09 lic-srv-xen-02 logger: /etc/xen/scripts/block: Writing backend/vbd/1/768/physical-device 7:0 to xenstore. Jun 20 11:48:09 lic-srv-xen-02 logger: /etc/xen/scripts/block: Writing backend/vbd/1/768/hotplug-status connected to xenstore. Jun 20 11:48:09 lic-srv-xen-02 kernel: [57683.770812] xt_physdev: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. Jun 20 11:48:09 lic-srv-xen-02 kernel: [57683.794340] xt_physdev: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymo...

...text, even though it might naively seem to be a logical thing to do in certain situations. And that brings us to the kernel warning emitted with respect to iptables. Admittedly, the text of this warning could stand to be revised a bit, as it does tend to give the wrong impression. Taking a look at xt_physdev.c in the kernel code would be useful in figuring out what the warning truly indicates: In function physdev_mt_check, xt_physdev.c wrote: > if (!(info->bitmask & XT_PHYSDEV_OP_MASK) || > info->bitmask & ~XT_PHYSDEV_OP_MASK) > return false; > if (info->bitmas...

...to find a solution at this 32 bit debian etch box with 2.6.18 or 2.6.20 kernel. The Hardware are compiled in Kernel. Just IPtables are Modules. Some intakt DomUs are booting well. Here are some data: lsmod in dom0 lsmod Module Size Used by xt_comment 6016 26 xt_physdev 7312 0 iptable_filter 7296 1 ip_tables 18244 1 iptable_filter x_tables 18692 3 xt_comment,xt_physdev,ip_tables bridge 60060 1 xt_physdev lspci lspci 00:00.0 Host bridge: ATI Technologies Inc Unknown device 7910 00:01.0 PCI brid...

...s one is with Xen 4.1.2-rc2-pre/Debian 2.6.32-5-xen-amd64. Both are on Intel DQ45CB board with 4GB ram. > Aug 31 13:05:41 nwsc-xen-Q45 kernel: [ 4039.348062] BUG: soft lockup - CPU#0 stuck for 79s! [xend:2767] > Aug 31 13:05:41 nwsc-xen-Q45 kernel: [ 4039.348073] Modules linked in: xt_tcpudp xt_physdev iptable_filter ip_tables x_ta bles ext4 jbd2 crc16 sata_sil24 hid_apple sky2 via_velocity crc_ccitt usb_storage raid456 md_mod async_raid6_recov async_ pq raid6_pq async_xor xor async_memcpy async_tx dm_mod ext3 jbd mbcache firewire_sbp2 loop sr_mod cdrom sg xe...

Hi folks, I am trying to get antispoofing running on xen3 (based on Debian Sarge). This is what I have done to enable it: 1. I have compiled a dom0 kernel with CONFIG_NETFILTER_XT_MATCH_PHYSDEV=m 2. I made sure this module is loaded: lsmod gives xt_physdev (among others). 3a. I have changed the line "(network-script network-bridge)" to "(network-script network-bridge antispoof=yes)" in /etc/xen/xend-config.sxp. 3b. I have also tried setting the default in network-bridge to yes by changing the antispoof line to "antispoof:...

...ser 0m0.010s sys 0m1.040s Wed Apr 26 06:56:55 CEST 2006 I''ve attached my ''.config'' for dom0 the modules not compiled into the kernel and loaded are $ lsmod Module Size Used by vfat 13248 0 fat 54812 1 vfat xt_physdev 2320 2 iptable_filter 2880 1 ip_tables 13144 1 iptable_filter x_tables 12868 2 xt_physdev,ip_tables dm_multipath 21128 0 video 16068 0 thermal 13384 0 processor 18544 1 thermal fan...

what does it mean? i never seen that before xen4 on debian squeeze 2.6.32-5-xen-amd64 [22077.208077] BUG: soft lockup - CPU#7 stuck for 61s! [udisks-dm-expor:11772] [22077.208139] Modules linked in: ext4 jbd2 crc16 xfs exportfs xt_tcpudp nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack xt_physdev bridge stp ip6table_filter ip6_tables iptable_filter ip_tables x_tables xen_evtchn xenfs fuse loop snd_pcm snd_timer snd soundcore snd_page_alloc evdev joydev i2c_i801 pcspkr psmouse i2c_core serio_raw ioatdma button processor acpi_processor ext3 jbd mbcache dm_mod sd_mod crc_t10dif usbhid hid ata_...

...ables 29891 52 ebt_arp,ebt_ip,ip6table_filter,ebtables,xt_time,xt_connlimit,xt_realm,xt_addrtype,iptable_raw,xt_comment,xt_recent,xt_policy,ipt_ULOG,ipt_REJECT,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ipt_ECN,ipt_ecn,ipt_CLUSTERIP,ipt_ah,xt_set,xt_TPROXY,ip6_tables,xt_tcpmss,xt_pkttype,xt_physdev,xt_owner,xt_NFQUEUE,xt_NFLOG,xt_multiport,xt_mark,xt_mac,xt_limit,xt_length,xt_iprange,xt_helper,xt_hashlimit,xt_DSCP,xt_dscp,xt_dccp,xt_conntrack,xt_connmark,xt_CLASSIFY,xt_AUDIT,ipt_LOG,xt_tcpudp,xt_state,iptable_nat,iptable_mangle,iptable_filter,ip_tables Guest network using bridge: <interfa...

...LK_UNHALT...| samples| %| ------------------ 1638493 99.9926 oprofiled 122 0.0074 anon (tgid:5130 range:0xbfffe000-0xbffff000) 936274 8.9787 oprofile 774699 7.4292 forcedeth 766927 7.3547 bridge 218558 2.0959 ehci_hcd 160988 1.5438 ip_tables 81633 0.7828 xt_physdev 41386 0.3969 iptable_filter 32890 0.3154 libc-2.4.so 21533 0.2065 usbcore 12378 0.1187 libgobject-2.0.so.0.1000.1 12291 0.1179 libglib-2.0.so.0.1000.1 9734 0.0933 Xorg CPU_CLK_UNHALT...| samples| %| ------------------ 9539 97.9967 Xorg 195 2.00...

...on Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0) The kernel is ok, it seems my sda hd was not detected. However I chroot my logical volume and create an initrd. Here my lsmod of domain 0 : [root@p-virtvip8 linux-2.6.19]# lsmod Module Size Used by xt_physdev 7121 0 bridge 60381 1 xt_physdev netloop 11073 0 netbk 79845 0 [permanent] blktap 386789 2 [permanent] blkbk 22753 0 [permanent] autofs4 25413 2 hidp 24129 2 rfcomm...

...physdev --physdev-out vnetX -g FO-vnetX which should trigger the following rules: -A FO-vnetX -p all -m state --state ESTABLISHED -j ACCEPT -A FO-vnetX -p tcp --dport 22 -m state --state NEW -j ACCEPT But this actually never happens. The FO-vnetX Chain never sees any packets and my syslog says: xt_physdev: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore Am i doing something wrong? I hope i did not write too much useless stuff here. I'm tried to figure it all out by myself, but im currently stuck. Lets hope some wise guys can hel...

...2176 4 ipt_layer7 8840 14 cls_u32 5636 6 sch_esfq 4736 10 xt_CLASSIFY 1024 28 xt_limit 1280 0 ipt_TOS 1152 0 xt_length 1152 6 ipt_tos 896 2 sch_htb 12544 2 xt_physdev 1808 2 floppy 44580 0 e1000 100032 0 ehci_hcd 22152 0 uhci_hcd 16012 0 usbcore 86148 3 ehci_hcd,uhci_hcd i82875p_edac 3332 0 dm_mod 34488 5 rtc 6708 0 A...

...ting repo. It crashed today morning. Hardware is a pretty ancient, testing machine (CO6 PV guests only), but had no problems yet. It was stable on 4.9*, including testing 4.9.15-22.el6.x86_64 Console output: [59826.069427] general protection fault: 0000 [#1] SMP [59826.069463] Modules linked in: xt_physdev br_netfilter xt_mac ebt_arp xen_pciback xen_gntalloc ebtable_filter ebtables bridge 8021q mrp garp stp llc xt_CT xt_addrtype iptable_raw nf_log_ ipv4 nf_log_common xt_LOG xt_limit xt_owner iptable_mangle iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat ip6t_REJECT nf_reject_ipv6 nf_c...

...6 >> sch_esfq 4736 10 >> xt_CLASSIFY 1024 28 >> xt_limit 1280 0 >> ipt_TOS 1152 0 >> xt_length 1152 6 >> ipt_tos 896 2 >> sch_htb 12544 2 >> xt_physdev 1808 2 >> floppy 44580 0 >> e1000 100032 0 >> ehci_hcd 22152 0 >> uhci_hcd 16012 0 >> usbcore 86148 3 ehci_hcd,uhci_hcd >> i82875p_edac 3332 0 >> dm_mo...

...4225 0 virtio 3309 2 virtio_net,virtio_blk pci_hotplug 21203 0 nf_conntrack_ipv4 9833 1 nf_defrag_ipv4 1139 1 nf_conntrack_ipv4 xt_state 1303 1 nf_conntrack 46567 2 nf_conntrack_ipv4,xt_state tun 10828 0 xt_physdev 1508 2 iptable_filter 2258 1 ip_tables 13899 1 iptable_filter x_tables 12845 3 xt_state,xt_physdev,ip_tables xen_evtchn 4259 1 bridge 39614 0 stp 1440 1 bridge xenfs 9568 1 xe...

..._tftp nf_conntrack_sip nf_conntrack_proto_udplite nf_conntrack_proto_sctp nf_conntrack_pptp nf_conntrack_proto_gre nf_conntrack_netlink nf_conntrack_netbios_ns nf_conntrack_broadcast nf_conntrack_irc nf_conntrack_h323 nf_conntrack_ftp xt_TPROXY nf_tproxy_core nf_defrag_ipv6 xt_tcpmss xt_pkttype xt_physdev xt_owner xt_NFQUEUE xt_NFLOG nfnetlink_log xt_multiport xt_MARK xt_mark xt_mac xt_limit xt_length xt_iprange xt_help Jan 30 09:46:13 qb-storage kernel: er xt_hashlimit xt_DSCP xt_dscp xt_dccp xt_conntrack xt_CONNMARK xt_connmark xt_CLASSIFY xt_AUDIT ipt_LOG xt_state iptable_nat nf_nat nf_conntr...