similar to: [Bug 1079] New: nft-0.6: segfault on add rule ip filter INPUT ip protocol igmp counter accept

https://bugzilla.netfilter.org/show_bug.cgi?id=946 Summary: Cannot invert a protocol: ip protocol != tcp Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P5 Component: nft AssignedTo: pablo at netfilter.org

The testsuite that checks for mcast_max_groups functionality will need to wipe the added groups as well. Add helpers to build an IGMP or MLD packets announcing that host is leaving a given group. Signed-off-by: Petr Machata <petrm at nvidia.com> --- tools/testing/selftests/net/forwarding/lib.sh | 50 +++++++++++++++++++ 1 file changed, 50 insertions(+) diff --git

Hi All, I have to develop IGMPSnoop application within kernel 2.6. For the same purpose, I would have to Snoop L3 level IGMP packet at L2 level(Bridging level). Can anybody suggests how it can be done. Does Netfilter library support this kind of feature. Thanks In Anticipation Maverick -- _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl

Hi, Is there an IGMP Snooping implementation in development in the bridge module ? Is the bridge module a good place for this feature ? It is better to add it in the module or in user space ? Regards, Nicolas -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.linux-foundation.org/pipermail/bridge/attachments/20080411/aff8a2cf/attachment.htm

The BBC are currently trialling multicasting the Olympics. This requires multicast and IGMP to be available. As far as I can make out, in 2.0.8 at least, all multicast addresses are filtered out and, to my naive eyes, can''t be re-enabled. Please prove me wrong :-) Dirk -- Please Note: Some Quantum Physics Theories Suggest That When the Consumer Is Not Directly Observing This Message,

These functions will be helpful for other testsuites as well. Extract them to a common place. Signed-off-by: Petr Machata <petrm at nvidia.com> Reviewed-by: Ido Schimmel <idosch at nvidia.com> --- .../selftests/net/forwarding/bridge_mdb.sh | 49 ------------------- tools/testing/selftests/net/forwarding/lib.sh | 49 +++++++++++++++++++ 2 files changed, 49 insertions(+), 49

https://bugzilla.netfilter.org/show_bug.cgi?id=1148 Bug ID: 1148 Summary: Getting a segmentation fault for some reason Product: nftables Version: unspecified Hardware: x86_64 OS: RedHat Linux Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at

I''m rate limiting and prioritizing traffic upstream of a slow wan link using htb, classic wonder shaper type stuff. I''m using the following command for traffic that does not match any of my defined filters: tc qdisc add dev eth0 root handle 1: htb default 50 It appears that local, non-routable traffic like arps and igmp are being snared by this and end-up queued in the lowest

Currently we would still potentially suffer multicast packet loss if there is just either an IGMP or an MLD querier: For the former case, we would possibly drop IPv6 multicast packets, for the latter IPv4 ones. This is because we are currently assuming that if either an IGMP or MLD querier is present that the other one is present, too. This patch makes the behaviour and fix added in "bridge:

Hi! The Netfilter project proudly presents: nftables 0.4 This release contains a lot of bug fixes and new features contained up to the recent 3.18 kernel release (and some features coming up in the yet unreleased 3.19-rc). New features ============ * Add support for global ruleset operations (available since 3.18). Get rid of all tables, chains, and rules in one go: # nft

https://bugzilla.netfilter.org/show_bug.cgi?id=834 Summary: nft crash when invalid meta proto is used Product: nftables Version: unspecified Platform: x86_64 OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: nft AssignedTo: pablo at netfilter.org ReportedBy: eric at

Hi, all! Can I enable multicasting via shorewall? I have router with Gentoo Linux (one interface to ISP, one with alises - to local network). Shorewall work perfect! But now I need setup Quagga (zebra) for dynamic routing between one more router via another provider. All routers daemons (zebra, ripd, ospf) used multicasting. In my configuration already enabled allowBcast and etc.

I have a standard 3 interface shorewall setup and I want to receive multicast stuff from ''net'' -> ''loc''. This requires me, first, to do an IGMP join which involves 192.168.1.x -> 224.0.0.x being NATed out as the ''net'' interface''s IP address. Obviously replies have to be NATed back to ''loc'' addresses. Can

I tried to close everything I had open and filter as best as I could.. but left random lines in just in case it helps. 172.16.5.230 is my local machine and *.33.235 is the server. This is a slow save.. 13:48:39.852340 (60) 001F5B35DB28 Broadcast UDP - Other Ports 172.16.5.93 172.16.5.255 00:04:53.922946 293.922946 13:48:39.852605 (60) 001F5B35DB28 USC-IANA

Hi, Gene Cumm wrote: > > 3) It feels like this is a moving target where gcc keeps changing and > > different results get reported. Do we have indications that different versions of gcc5 cause different behavior on the same build and boot machines ? Ady wrote: > Since the issue is only present on specific > hardware / firmware, whatever might seem to "solve" the

running Version 3.6.23-14.el6_6 I'm having slow save times with folders names ~something.. ie. /www/~bin/content.txt. doing this via a windows share.. when I save file it has a moment (few seconds) of hesitation.. then saves. When I do /www/bin/content.txt. the file saves instantly. Is there anywhere I can change a setting to fix this? or is this a bug. I've looked in the logs

On 31.07.2014 17:23, Dennis Jacobfeuerborn wrote: > On 31.07.2014 15:14, Dennis Jacobfeuerborn wrote: >> Hi, >> today a couple of Hypervisors got restarted due to a power outage. While >> the systems and the VMs on the are running fine multicast traffic >> between the guests is no longer working. >> >> I generate multicast udp packet using iperf in the guest

How do I tell LogCheck that I don't care what's in the rest of the search string? ^\w{3} [ :0-9]{11} m0n0wall ipmon\[[0-9]+\]: [0-9:]{8}\.[0-9]{6} xl0 (@ 0:3|@100:3) (b|p) 192\.168\.2\.[0-9]{1,3} -> [0-9.]{7,15} PR igmp len [0-9]{2} \([0-9]{2}+\) IN$ ^\w{3} [ :0-9]{11} m0n0wall ipmon\[[0-9]+\]: [0-9:]{8}\.[0-9]{6} xl0 (@ 0:3|@100:3) (b|p) 192\.168\.2\.[0-9]{1,3} -> [0-9.]{7,15} PR

Hi, I have been reading: http://lartc.org/howto/lartc.multicast.html in effort to understand how to route multicast traffic and just joined the group. History: I am trying to multicast mpeg (using the videolan server) on a private network. The server side of the network is copper gigabit, which connects to one of those cheap fast Ethernet switches with a single gigabit uplink. The problem

I have used lokkit to setup iptables ( I have a big script that does this) basically just ports I want with "--port=https:tcp" etc... I wish to allow igmp and add igmp to the lokkit command line? How do I do that? I can add this to /etc/sysconfig/iptables: iptables -A RH-Firewall-1-INPUT -i eth1 -j ACCEPT iptables -A RH-Firewall-1-INPUT -i eth1 -p igmp -j ACCEPT iptables-save >