similar to: Bug in init scripts for ipset?

In article <CAG2kNCyjsQZ2qW_8BBLp8BH_20=JgxoEYpn9BSwZhXg7_rHBbg at mail.gmail.com>, Gianluca Cecchi <gianluca.cecchi at gmail.com> wrote: > On Mon, Nov 21, 2016 at 12:49 PM, Tony Mountifield <tony at softins.co.uk> > wrote: > > > I am just applying the latest C6 updates to a couple of KVM Linodes. > > It appears that the latest update of util-linux-ng has

I want to use the ipset-service to store ipsets persistently across boots. (For use by iptables rules. firewalld has direct support for persistent ipsets but I need the more general capability of raw iptables.) I'm using a kernel with ipsets compiled in, rather than loaded as a module. The support script that saves ipsets checks if the module is loaded before saving and finds nothing, so

In article <4cbb9dc4-f063-3434-b7a1-d4d0e6581b5e at domblogger.net>, Alice Wonder <alice at domblogger.net> wrote: > https://forum.linode.com/viewtopic.php?f=19&t=14570&p=72785 > > I can not figure out what I need to do. > > Apparently according to linode support, the VM is trying to grab an IPv6 > address with some privacy stuff enabled by default causing

I am just applying the latest C6 updates to a couple of KVM Linodes. It appears that the latest update of util-linux-ng has added a new dependency on the kernel package. On these VMs, the kernel package is not normally installed, and the VM runs a host-supplied kernel. But now, a "yum update" wants to install for dependencies kernel, kernel-firmware and grubby, none of which should be

Anybody on here successfully get ipset iptables sets to work _after_ a reboot? My question on StackExchange http://unix.stackexchange.com/questions/149536/upon-bootup-all-iptables-are-lost-because-the-kernel-module-ip-set-is-not-loade Some of the things that need to be in place, otherwise iptables does not load: 1.) The kernel module ip_set needs to be loaded. 2.) The "sets" need to be

In article <1612557.81lQ3GSSy2 at techz>, G?nther J. Niederwimmer <gjn at gjn.priv.at> wrote: > Hello, > > I have a big problem with fail2ban and firewalld on my new system. > > I have a server running (CentOS 7.1) and run a Update to 7.2 on this system > all is working ? > > BUT I install a new system with CentOS 7 1511 on this systems fail2ban don't

https://bugzilla.netfilter.org/show_bug.cgi?id=1081 Bug ID: 1081 Summary: /tmp/ccKT2Q7s.o: In function `help': ipset.c:(.text+0x27c): undefined reference to `ipset_envopts' Product: ipset Version: unspecified Hardware: i386 OS: Ubuntu Status: NEW Severity:

I have been using shorewall for years with ipsets. I have encountered a problem after upgrading from 4.2.11 to 4.4.10. When I run ''shorewall-check'' or ''shorewall start'', it halts with the error: ---------------------------------------------------------------------- ERROR: ipset names in Shorewall configuration files require Ipset Match in your kernel and

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=485 Summary: Stresstesting ipset crashes kernel Product: ipset Version: 2.2.8 Platform: x86_64 OS/Version: RedHat Linux Status: NEW Severity: major Priority: P2 Component: default AssignedTo: kadlec@netfilter.org ReportedBy:

http://bugzilla.netfilter.org/show_bug.cgi?id=773 Summary: iptables performance limits on # of rules using ipset Product: ipset Version: unspecified Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: default AssignedTo: netfilter-buglog at lists.netfilter.org

On Mon, Nov 21, 2016 at 12:49 PM, Tony Mountifield <tony at softins.co.uk> wrote: > I am just applying the latest C6 updates to a couple of KVM Linodes. > It appears that the latest update of util-linux-ng has added a new > dependency on the kernel package. > > On these VMs, the kernel package is not normally installed, and the VM > runs a host-supplied kernel. But now, a

https://bugzilla.netfilter.org/show_bug.cgi?id=1139 Bug ID: 1139 Summary: The include guards on the include/libipset/linux_ip_set*.h are wrong Product: ipset Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component:

In article <mfbt6f$9rt$1 at softins.softins.co.uk>, Tony Mountifield <tony at softins.co.uk> wrote: > I am trying to debug a SIP issue, between an Asterisk 1.2.32 system that > is behind a network device to which I don't have ready access, which is > performing NAT with possibly some kind of SIP ALG, and an Asterisk 11 > system on a public IP. > > My question is

ipset on CentOS6 comes with /etc/rc.d/init.d/ipset so that "service ipset reload" can be used to (re)load the configuration. CentOS7 doesn't come with an equivalent for systemd: # systemctl reload ipset.service Failed to issue method call: Unit ipset.service failed to load: No such file or directory. # systemctl start ipset.service Failed to issue method call: Unit ipset.service

Hi all I have a CentOS6 box with shorewall-4.5.21. If I have IPSET= in shorewall.conf and I issue the command "shorewall add ppp:192.168.33.3 ptp", I get the error: /usr/share/shorewall/lib.cli: line 585: [: too many arguments ERROR: Zone ptp, interface ppp does not have a dynamic host list The error is corrected setting the actual path to ipset in shorewall.conf, or via the patch:

In article <n009u2$85v$1 at softins.softins.co.uk>, Tony Mountifield <tony at softins.co.uk> wrote: > Apologies, this is slightly off-topic being to do with an EPEL package, > although it's running on CentOS6, so I thought others here might have come > across this issue. > > I have five CentOS 6 systems running fail2ban from EPEL, and this > package was updated

http://bugzilla.netfilter.org/show_bug.cgi?id=640 Summary: ipset-4.2 : ipset -T <some_setlist> <address> always negative Product: ipset Version: unspecified Platform: All OS/Version: All Status: NEW Severity: normal Priority: P1 Component: default AssignedTo:

Has anyone else experienced a problem with the LED for span 1 on a TE410P or TE405P? I had a TE410P on which the span 1 LED would not light red, but once the span was connected, it did correctly light green. I RMAed the board to our UK distrbutor and received a replacement. However, the replacement board displayed the same problem! Wondering if it was related to the computer I was putting it

In article <20151125133008.6369360.14455.17239 at gmail.com>, Israel Gottlieb <isrlgb at gmail.com> wrote: > Try putting progress instead of answer Yes, I tried Progress already, and it didn't help. But thanks for the suggestion! Tony > I have a puzzling situation, and would be grateful for any insight. > > I have a dialplan that forwards an incoming call out to

https://bugzilla.netfilter.org/show_bug.cgi?id=899 Summary: ipset with more than 253 IPs Product: nftables Version: unspecified Platform: x86_64 OS/Version: All Status: NEW Severity: blocker Priority: P5 Component: nft AssignedTo: pablo at netfilter.org ReportedBy: devkid at devkid.net