Hi Tom, found an issue with 4.2-RC1. Same config worked on 10.3, copying it to a 11 host causes: What is "flowid"? Illegal "police" ERROR: Command "tc filter add dev dsl0 parent ffff: protocol ip pref 10 u32 match ip src 0.0.0.0/0 police rate 16490kbit burst 10k drop flowid :1" Failed Content of tcdevices: dsl0 16490kbit 1100kbit Alex ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
Alexander Wilms wrote:> Hi Tom, > > found an issue with 4.2-RC1. > > Same config worked on 10.3, copying it to a 11 host causes: > > What is "flowid"? > Illegal "police" > ERROR: Command "tc filter add dev dsl0 parent ffff: protocol ip pref 10 u32 > match ip src 0.0.0.0/0 police rate 16490kbit burst 10k drop flowid :1" Failed > > Content of tcdevices: > dsl0 16490kbit 1100kbit >How is that an RC1 problem? -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
Alexander Wilms wrote:> OK, lets call it iproute2 issue with the iproute2 package of OS11. > > Anything known like that?Yes -- this bug showed up in Debian too but the Debian folks managed to find it quickly. Apparently the SuSE team haven''t.... -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
OK, lets call it iproute2 issue with the iproute2 package of OS11. Anything known like that? Alex On Sonntag 07 September 2008, Tom Eastep wrote:> Alexander Wilms wrote: > > Hi Tom, > > > > found an issue with 4.2-RC1. > > > > Same config worked on 10.3, copying it to a 11 host causes: > > > > What is "flowid"? > > Illegal "police" > > ERROR: Command "tc filter add dev dsl0 parent ffff: protocol ip pref > > 10 u32 match ip src 0.0.0.0/0 police rate 16490kbit burst 10k drop flowid > > :1" Failed > > > > Content of tcdevices: > > dsl0 16490kbit 1100kbit > > How is that an RC1 problem? > > -Tom------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
Tom Eastep wrote:> Alexander Wilms wrote: >> OK, lets call it iproute2 issue with the iproute2 package of OS11. >> >> Anything known like that? > > Yes -- this bug showed up in Debian too but the Debian folks managed to > find it quickly. Apparently the SuSE team haven''t....There was a hack in Shorewall to work around it at one point but I took it out when the bad patch got withdrawn from iproute2. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
On Sonntag 07 September 2008, Tom Eastep wrote:> Tom Eastep wrote: > > Alexander Wilms wrote: > >> OK, lets call it iproute2 issue with the iproute2 package of OS11. > >> > >> Anything known like that? > > > > Yes -- this bug showed up in Debian too but the Debian folks managed to > > find it quickly. Apparently the SuSE team haven''t.... > > There was a hack in Shorewall to work around it at one point but I took > it out when the bad patch got withdrawn from iproute2. > > -TomAny hint about the name of that patch? Will try to build a fixed version in the opensuse build service. Alex ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
Alexander Wilms wrote:> Any hint about the name of that patch? > Will try to build a fixed version in the opensuse build service.No -- happened last spring though IIRC. You should be able to find it in the list archives. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
Tom Eastep wrote:> Alexander Wilms wrote: > >> Any hint about the name of that patch? >> Will try to build a fixed version in the opensuse build service. > > No -- happened last spring though IIRC. You should be able to find it in > the list archives.Last posts occurred in January on the development list. See the thread entitled "Missing patch for shorewall-shell in 4.0.7". -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
On Sonntag 07 September 2008, Tom Eastep wrote:> Alexander Wilms wrote: > > Any hint about the name of that patch? > > Will try to build a fixed version in the opensuse build service. > > No -- happened last spring though IIRC. You should be able to find it in > the list archives. > > -TomFound. It''s a bug in the iproute2 version itself. Will try to compile new package, but need to hack the SPEC file first. Seems to be buggy. Alex ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
Alexander Wilms wrote:> On Sonntag 07 September 2008, Tom Eastep wrote: >> Alexander Wilms wrote: >>> Any hint about the name of that patch? >>> Will try to build a fixed version in the opensuse build service. >> No -- happened last spring though IIRC. You should be able to find it in >> the list archives. >> >> -Tom > > Found. It''s a bug in the iproute2 version itself. > Will try to compile new package, but need to hack the SPEC file first. Seems > to be buggy.FWIW, I haven''t upgraded my firewall to 11.0 yet. Upgraded the server on Friday but I''m in no hurry with the firewall. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
Alexander Wilms wrote:> On Sonntag 07 September 2008, Tom Eastep wrote: >> Alexander Wilms wrote: >>> On Sonntag 07 September 2008, Tom Eastep wrote: >>>> Alexander Wilms wrote: >>>>> Any hint about the name of that patch? >>>>> Will try to build a fixed version in the opensuse build service. >>>> No -- happened last spring though IIRC. You should be able to find it in >>>> the list archives. >>>> >>>> -Tom >>> Found. It''s a bug in the iproute2 version itself. >>> Will try to compile new package, but need to hack the SPEC file first. >>> Seems to be buggy. >> FWIW, I haven''t upgraded my firewall to 11.0 yet. Upgraded the server on >> Friday but I''m in no hurry with the firewall. >> >> -Tom > > You''ll receive a working iproute2 RPM tonight...I promise.Thanks.> Still Xen VMs?No -- I switched to KVM. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
On Sonntag 07 September 2008, Tom Eastep wrote:> Alexander Wilms wrote: > > On Sonntag 07 September 2008, Tom Eastep wrote: > >> Alexander Wilms wrote: > >>> Any hint about the name of that patch? > >>> Will try to build a fixed version in the opensuse build service. > >> > >> No -- happened last spring though IIRC. You should be able to find it in > >> the list archives. > >> > >> -Tom > > > > Found. It''s a bug in the iproute2 version itself. > > Will try to compile new package, but need to hack the SPEC file first. > > Seems to be buggy. > > FWIW, I haven''t upgraded my firewall to 11.0 yet. Upgraded the server on > Friday but I''m in no hurry with the firewall. > > -TomYou''ll receive a working iproute2 RPM tonight...I promise. Still Xen VMs? Alex ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
On Sonntag 07 September 2008, Tom Eastep wrote:> Alexander Wilms wrote: > > On Sonntag 07 September 2008, Tom Eastep wrote: > >> Alexander Wilms wrote: > >>> On Sonntag 07 September 2008, Tom Eastep wrote: > >>>> Alexander Wilms wrote: > >>>>> Any hint about the name of that patch? > >>>>> Will try to build a fixed version in the opensuse build service. > >>>> > >>>> No -- happened last spring though IIRC. You should be able to find it > >>>> in the list archives. > >>>> > >>>> -Tom > >>> > >>> Found. It''s a bug in the iproute2 version itself. > >>> Will try to compile new package, but need to hack the SPEC file first. > >>> Seems to be buggy. > >> > >> FWIW, I haven''t upgraded my firewall to 11.0 yet. Upgraded the server on > >> Friday but I''m in no hurry with the firewall. > >> > >> -Tom > > > > You''ll receive a working iproute2 RPM tonight...I promise. > > Thanks. > > > Still Xen VMs? > > No -- I switched to KVM. >I still use Xen, you know because of the pci driver domains. But the upgrade this time is really PITA. openSUSEs RPM changes regarding bz2 vs. lzma payload and Xen API incompatibilities. If your firewall holding the ADSL link is a xen domU you''ll really find out about the chicken - egg problem. But after 10 hours it works now. Btw, here is the working RPM: http://download.opensuse.org/repositories/home:/atzewilms/openSUSE_11.0/ Alex ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
Alexander Wilms wrote:> Btw, here is the working RPM: > > http://download.opensuse.org/repositories/home:/atzewilms/openSUSE_11.0/Thanks, Alex. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
On Sonntag 07 September 2008, Tom Eastep wrote:> Alexander Wilms wrote: > > Btw, here is the working RPM: > > > > http://download.opensuse.org/repositories/home:/atzewilms/openSUSE_11.0/ > > Thanks, Alex. > > -TomFilled bug report. Nothing known yet to the bugzilla database. Let''s see how fast the openSUSE team is: https://bugzilla.novell.com/show_bug.cgi?id=424152 Hope their Specfile will be better hacked than mine :-) Alex ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/