similar to: [Bug 1128] ip6_tables connmark or connlabel never matches

Displaying 20 results from an estimated 10000 matches similar to: "[Bug 1128] ip6_tables connmark or connlabel never matches"

2017 Mar 10
4
[Bug 1128] New: ip6_tables connmark or connlabel never matches
https://bugzilla.netfilter.org/show_bug.cgi?id=1128 Bug ID: 1128 Summary: ip6_tables connmark or connlabel never matches Product: netfilter/iptables Version: unspecified Hardware: x86_64 OS: SuSE Linux Status: NEW Severity: normal Priority: P5 Component: ip6_tables (kernel)
2013 Jun 09
1
[Bug 828] New: connlabel.conf is missing in built package if it exists on the system.
https://bugzilla.netfilter.org/show_bug.cgi?id=828 Summary: connlabel.conf is missing in built package if it exists on the system. Product: iptables Version: unspecified Platform: x86_64 OS/Version: other Status: NEW Severity: minor Priority: P5 Component: unknown AssignedTo:
2014 Aug 07
2
[Bug 968] New: CONNMARK failing open silently?
https://bugzilla.netfilter.org/show_bug.cgi?id=968 Summary: CONNMARK failing open silently? Product: netfilter/iptables Version: unspecified Platform: x86_64 OS/Version: Ubuntu Status: NEW Severity: normal Priority: P5 Component: nf_conntrack AssignedTo: netfilter-buglog at lists.netfilter.org
2016 Apr 15
0
[Bug 1032] nftables-0.5 fails to import ip6 tables when loopback address provided as both src and dst addr
https://bugzilla.netfilter.org/show_bug.cgi?id=1032 Florian Westphal <fw at strlen.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fw at strlen.de Assignee|pablo at netfilter.org |fw at strlen.de --- Comment #2 from Florian
2019 Sep 16
0
[Bug 1015] ip6tables-save and "-p all" or no specification of protocol.
https://bugzilla.netfilter.org/show_bug.cgi?id=1015 Florian Westphal <fw at strlen.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED CC| |fw
2003 Jan 27
0
[Bug 11] ip6_tables doesn't work on sparc64
https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=11 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED OS/Version| |All Platform| |All
2003 May 23
0
[Bug 11] ip6_tables doesn't work on sparc64
https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=11 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED ------- Additional Comments From
2013 May 29
1
[ANNOUNCE] iptables 1.4.19 release
Hi! The Netfilter project proudly presents: iptables 1.4.19 This release includes support for the new connlabel and bpf matches available in Linux 3.9, several fixes and manpage updates. See ChangeLog that comes attached to this email for more details. You can download it from: http://www.netfilter.org/projects/iptables/downloads.html ftp://ftp.netfilter.org/pub/iptables/ Have fun!
2018 Jan 30
5
[Bug 1220] New: Reverse path filtering using "fib" needs better documentation
https://bugzilla.netfilter.org/show_bug.cgi?id=1220 Bug ID: 1220 Summary: Reverse path filtering using "fib" needs better documentation Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: minor Priority: P5 Component: nft
2018 Jul 26
1
[Bug 1273] New: hashlimit never appears to fail to match under 4.9.x
https://bugzilla.netfilter.org/show_bug.cgi?id=1273 Bug ID: 1273 Summary: hashlimit never appears to fail to match under 4.9.x Product: netfilter/iptables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: major Priority: P5 Component: ip_tables (kernel)
2009 May 29
5
CONNMARK target and connmark match support in Ubuntu kernel
Hi, as per the shorewall MultiISP documentation ( http://www1.shorewall.net/MultiISP.html ), it says "Use of this feature requires that your kernel and iptables include CONNMARK target and connmark match support (Warning: Standard Debian™ and Ubuntu™ kernels are lacking that support!)." it means MultiISP wont work properly if i am using Ubuntu server. if yes whats the
2019 Sep 15
3
[Bug 1365] New: nft crashes in chain_print_declaration()
https://bugzilla.netfilter.org/show_bug.cgi?id=1365 Bug ID: 1365 Summary: nft crashes in chain_print_declaration() Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org
2013 Aug 06
0
[ANNOUNCE] libnetfilter_conntrack 1.0.4 release
Hi! The Netfilter project proudly presents: libnetfilter_conntrack 1.0.4 libnetfilter_conntrack is a userspace library providing a programming interface (API) to the in-kernel connection tracking state table. This library is currently used by conntrack-tools and iptables, among other applications. This release includes connlabel support, one memleak fix and fixes in the comparison API.
2017 May 21
3
[Bug 1150] New: Iptables fails to match rules with malloc perturberation activated
https://bugzilla.netfilter.org/show_bug.cgi?id=1150 Bug ID: 1150 Summary: Iptables fails to match rules with malloc perturberation activated Product: iptables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component:
2013 Aug 06
0
[ANNOUNCE] conntrack-tools 1.4.2 release
Hi! The Netfilter project proudly presents: conntrack-tools 1.4.2 The conntrack-tools are the userspace command line interface `conntrack' and the userspace daemon `conntrackd'. The conntrack utility replaces the old /proc/net/nf_conntrack interface. With conntrack, you can dump, modify and delete entries from the connection tracking state table from userspace. On the other
2016 Apr 19
0
[Bug 1032] nftables-0.5 fails to import ip6 tables when loopback address provided as both src and dst addr
https://bugzilla.netfilter.org/show_bug.cgi?id=1032 Florian Westphal <fw at strlen.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are
2024 Nov 18
0
[Bug 1584] nft large sets load high memory requirements
https://bugzilla.netfilter.org/show_bug.cgi?id=1584 --- Comment #9 from Pablo Neira Ayuso <pablo at netfilter.org> --- more improvements in userspace: 20f1c60ac8c8 src: collapse set element commands from parser 193faa5475a5 json: collapse set element commands from parser depending on ruleset pattern. Kernel patches also got merge to reduce memory consumption: commit
2020 Oct 14
0
[Bug 1476] New: xtables-monitor --trace segfaults running inside a container
https://bugzilla.netfilter.org/show_bug.cgi?id=1476 Bug ID: 1476 Summary: xtables-monitor --trace segfaults running inside a container Product: bugzilla Version: other Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: netfilter
2013 Apr 21
2
[Bug 812] addrtype with limit-iface-in in ip6tables/nat/PREROUTING messes up the route cache
https://bugzilla.netfilter.org/show_bug.cgi?id=812 Florian Westphal <fw at strlen.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fw at strlen.de --- Comment #1 from Florian Westphal <fw at strlen.de> 2013-04-21 16:48:04 CEST ---
2004 Sep 24
2
CONNMARK problem
Hello everybody. i have the folowing problem: i have this in the top of PREROUTING chain in mangle table iptables -t mangle -A PREROUTING -j CONNMARK --set-mark 0 # rule 1 iptables -t mangle -A PREROUTING -m connmark --mark 5 # rule 2 iptables -t mangle -A PREROUTING -m connmark --mark 6 # rule 3 i think when packet is passing trough my POSTROUTING in mangle table