similar to: [Bug 94] Limit match not working on sparc64

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=94 kaber@trash.net changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |FIXED ------- Additional Comments From kaber@trash.net 2006-09-18

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=1 netfilter@linuxace.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |netfilter@linuxace.com Status|ASSIGNED |RESOLVED OS/Version|

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=94 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|major |normal Component|netfilter hooks |ip_tables (kernel) ------- Additional Comments From

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=41 Summary: pptp-conntrack-nat and sparc64 structures/padding/maskcomp bug Product: netfilter/iptables Version: patch-o-matic Platform: sparc64 OS/Version: All Status: NEW Severity: normal Priority: P2 Component: connection

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=474 jan.oravec@6com.sk changed: What |Removed |Added ---------------------------------------------------------------------------- OS/Version|All |Gentoo Platform|All |sparc64 ------- Additional Comments From jan.oravec@6com.sk

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=59 Summary: sparc64 conntrack issue with expecting related connections, FTP Product: netfilter/iptables Version: linux-2.4.x Platform: sparc64 OS/Version: other Status: NEW Severity: normal Priority: P2 Component:

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=474 Summary: nf_conntrack marks all packets as INVALID on sparc64 (probably endianness bug) Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component:

http://bugzilla.netfilter.org/show_bug.cgi?id=728 Summary: ip_tables: limit match: invalid size 40!=48 Product: netfilter/iptables Version: linux-2.6.x Platform: mips64 OS/Version: Debian GNU/Linux Status: NEW Severity: critical Priority: P2 Component: ip_tables (kernel) AssignedTo:

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=95 Summary: inverse limit match doesn't work Product: netfilter/iptables Version: linux-2.4.x Platform: i386 OS/Version: Mandrake Linux Status: NEW Severity: normal Priority: P2 Component: ip_tables (kernel) AssignedTo:

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=95 ------- Additional Comments From laforge@netfilter.org 2003-10-08 16:44 ------- it is impossible to use this solution, since it would change the structure size between kernel and userspace. This way everybody would need to recompile the iptables userspace program, and there is no forward/backwards compatibility :(

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=90 Summary: RPC and RSH conntrack helpers don't use struct ip_conntrack_helper->name correctly Product: netfilter/iptables Version: patch-o-matic Platform: other OS/Version: other Status: NEW Severity: normal Priority: P2

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=24 gandalf@wlug.westbo.se changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |outsider@key2peace.org ------- Additional Comments From gandalf@wlug.westbo.se 2003-04-23 15:57 ------- *** Bug 83

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=36 Summary: Possible SMP-race in rule handling (or other memorycorrupting thing) Product: netfilter/iptables Version: linux-2.4.x Platform: other OS/Version: other Status: NEW Severity: minor Priority: P2 Component:

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=72 gandalf@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |INVALID ------- Additional Comments From gandalf@netfilter.org

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=11 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED ------- Additional Comments From

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=59 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching

https://bugzilla.netfilter.org/show_bug.cgi?id=1170 Bug ID: 1170 Summary: limit-burst is not fully consumed and rule stops matching Product: netfilter/iptables Version: unspecified Hardware: x86_64 OS: Ubuntu Status: NEW Severity: major Priority: P5 Component:

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=37 Summary: icmp match defaults to --icmp-type icmp-echo-reply Product: iptables userspace Version: 1.1.2 Platform: other OS/Version: other Status: NEW Severity: normal Priority: P2 Component: iptables AssignedTo: laforge@netfilter.org

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=11 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED OS/Version| |All Platform| |All

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=95 ------- Additional Comments From laforge@netfilter.org 2003-05-31 23:25 ------- I can confirm this bug. neither libipt_limit.c nor ipt_limit.c contain any handling of inversion. Together with Bug #94, I think it's time to rewrite parts of the limit match in order to address those issues. I doubt this will be possible