similar to: [Bug 94] Limit match not working.

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=95 ------- Additional Comments From laforge@netfilter.org 2003-05-31 23:25 ------- I can confirm this bug. neither libipt_limit.c nor ipt_limit.c contain any handling of inversion. Together with Bug #94, I think it's time to rewrite parts of the limit match in order to address those issues. I doubt this will be possible

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=447 Summary: iptables doesn't support multiple times the same match in one rule Product: iptables Version: 1.3.5 Platform: All OS/Version: All Status: NEW Severity: major Priority: P2 Component: iptables AssignedTo:

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=40 Summary: system hangs, Availability problems, maybe conntrack bug, possible reason here. Product: netfilter/iptables Version: linux-2.4.x Platform: i386 OS/Version: RedHat Linux Status: NEW Severity: critical Priority: P2

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=95 Summary: inverse limit match doesn't work Product: netfilter/iptables Version: linux-2.4.x Platform: i386 OS/Version: Mandrake Linux Status: NEW Severity: normal Priority: P2 Component: ip_tables (kernel) AssignedTo:

http://bugzilla.netfilter.org/show_bug.cgi?id=728 Summary: ip_tables: limit match: invalid size 40!=48 Product: netfilter/iptables Version: linux-2.6.x Platform: mips64 OS/Version: Debian GNU/Linux Status: NEW Severity: critical Priority: P2 Component: ip_tables (kernel) AssignedTo:

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=564 Summary: quota match: working or not? Product: netfilter/iptables Version: unspecified Platform: All OS/Version: All Status: NEW Severity: minor Priority: P2 Component: ip_tables (kernel) AssignedTo: laforge@netfilter.org

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=469 Summary: recent match doesn't triger with --hitcount > 20 Product: netfilter/iptables Version: linux-2.6.x Platform: i386 OS/Version: other Status: NEW Severity: normal Priority: P2 Component: ip_tables (kernel) AssignedTo:

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=45 Summary: Feature: only count packets that get matched in a chain Product: netfilter/iptables Version: linux-2.4.x Platform: i386 OS/Version: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P2 Component: ip_tables (kernel)

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=531 Summary: ip_tables.h: IPT_TABLE_MAXNAMELEN bogously #defined to XT_FUNCTION_MAXNAMELEN Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component:

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=478 Summary: Kernel panic - not syncing: Aiee, killing interrupt handler! Product: iptables Version: 1.3.5 Platform: x86_64 OS/Version: Fedora Status: NEW Severity: blocker Priority: P2 Component: iptables AssignedTo:

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=490 Summary: ROUTE extension module unusable since 2.6.16 Product: netfilter/iptables Version: patch-o-matic-ng Platform: i386 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P2 Component: ip_tables (kernel) AssignedTo:

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=68 ------- Additional Comments From laforge@netfilter.org 2003-03-20 10:55 ------- This looks strange. The BUG in slab.c tells us that there is a GFP_ATOMIC missing. This means that we are allocating kernel memory from softirq context with only GFP_KERNEL. If I understand your backtrace correctly, what happens is: - you are

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=442 Summary: skb->data_len corrupted in NF_IP_LOCAL_OUT in mangle table Product: netfilter/iptables Version: linux-2.6.x Platform: i386 OS/Version: Debian GNU/Linux Status: NEW Severity: major Priority: P2 Component: ip_tables

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=96 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED Component|ip_tables (kernel) |connection tracking ------- Additional Comments From

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=39 Summary: can't execute 'make modules' Product: netfilter/iptables Version: patch-o-matic Platform: i386 OS/Version: RedHat Linux Status: NEW Severity: major Priority: P2 Component: ip_tables (kernel) AssignedTo:

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=95 ------- Additional Comments From laforge@netfilter.org 2003-10-08 16:44 ------- it is impossible to use this solution, since it would change the structure size between kernel and userspace. This way everybody would need to recompile the iptables userspace program, and there is no forward/backwards compatibility :(

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=34 Summary: Redirecting udp packets to closed port gives bad icmp error Product: netfilter/iptables Version: linux-2.4.x Platform: i386 OS/Version: RedHat Linux Status: NEW Severity: normal Priority: P2 Component: ip_tables

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=94 ------- Additional Comments From gandalf@netfilter.org 2004-05-27 00:20 ------- I've just committed a bunch of fixes for 64bit kernel / 32bit userspace into cvs. Please download iptables from cvs, compile and test. ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=36 Summary: Possible SMP-race in rule handling (or other memorycorrupting thing) Product: netfilter/iptables Version: linux-2.4.x Platform: other OS/Version: other Status: NEW Severity: minor Priority: P2 Component:

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=38 Summary: can't execute 'make modules' Product: netfilter/iptables Version: patch-o-matic Platform: i386 OS/Version: other Status: NEW Severity: major Priority: P2 Component: ip_tables (kernel) AssignedTo: