Displaying 20 results from an estimated 10000 matches similar to: "[Bug 1128] ip6_tables connmark or connlabel never matches"
2017 Mar 10
4
[Bug 1128] New: ip6_tables connmark or connlabel never matches
https://bugzilla.netfilter.org/show_bug.cgi?id=1128
Bug ID: 1128
Summary: ip6_tables connmark or connlabel never matches
Product: netfilter/iptables
Version: unspecified
Hardware: x86_64
OS: SuSE Linux
Status: NEW
Severity: normal
Priority: P5
Component: ip6_tables (kernel)
2013 Jun 09
1
[Bug 828] New: connlabel.conf is missing in built package if it exists on the system.
https://bugzilla.netfilter.org/show_bug.cgi?id=828
Summary: connlabel.conf is missing in built package if it
exists on the system.
Product: iptables
Version: unspecified
Platform: x86_64
OS/Version: other
Status: NEW
Severity: minor
Priority: P5
Component: unknown
AssignedTo:
2014 Aug 07
2
[Bug 968] New: CONNMARK failing open silently?
https://bugzilla.netfilter.org/show_bug.cgi?id=968
Summary: CONNMARK failing open silently?
Product: netfilter/iptables
Version: unspecified
Platform: x86_64
OS/Version: Ubuntu
Status: NEW
Severity: normal
Priority: P5
Component: nf_conntrack
AssignedTo: netfilter-buglog at lists.netfilter.org
2016 Apr 15
0
[Bug 1032] nftables-0.5 fails to import ip6 tables when loopback address provided as both src and dst addr
https://bugzilla.netfilter.org/show_bug.cgi?id=1032
Florian Westphal <fw at strlen.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |fw at strlen.de
Assignee|pablo at netfilter.org |fw at strlen.de
--- Comment #2 from Florian
2019 Sep 16
0
[Bug 1015] ip6tables-save and "-p all" or no specification of protocol.
https://bugzilla.netfilter.org/show_bug.cgi?id=1015
Florian Westphal <fw at strlen.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |FIXED
CC| |fw
2003 Jan 27
0
[Bug 11] ip6_tables doesn't work on sparc64
https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=11
laforge@netfilter.org changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |ASSIGNED
OS/Version| |All
Platform| |All
2003 May 23
0
[Bug 11] ip6_tables doesn't work on sparc64
https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=11
laforge@netfilter.org changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|ASSIGNED |RESOLVED
Resolution| |FIXED
------- Additional Comments From
2013 May 29
1
[ANNOUNCE] iptables 1.4.19 release
Hi!
The Netfilter project proudly presents:
iptables 1.4.19
This release includes support for the new connlabel and bpf matches
available in Linux 3.9, several fixes and manpage updates.
See ChangeLog that comes attached to this email for more details.
You can download it from:
http://www.netfilter.org/projects/iptables/downloads.html
ftp://ftp.netfilter.org/pub/iptables/
Have fun!
2018 Jan 30
5
[Bug 1220] New: Reverse path filtering using "fib" needs better documentation
https://bugzilla.netfilter.org/show_bug.cgi?id=1220
Bug ID: 1220
Summary: Reverse path filtering using "fib" needs better
documentation
Product: nftables
Version: unspecified
Hardware: All
OS: All
Status: NEW
Severity: minor
Priority: P5
Component: nft
2018 Jul 26
1
[Bug 1273] New: hashlimit never appears to fail to match under 4.9.x
https://bugzilla.netfilter.org/show_bug.cgi?id=1273
Bug ID: 1273
Summary: hashlimit never appears to fail to match under 4.9.x
Product: netfilter/iptables
Version: unspecified
Hardware: x86_64
OS: All
Status: NEW
Severity: major
Priority: P5
Component: ip_tables (kernel)
2009 May 29
5
CONNMARK target and connmark match support in Ubuntu kernel
Hi,
as per the shorewall MultiISP documentation ( http://www1.shorewall.net/MultiISP.html
), it says
"Use of this feature requires that your kernel and iptables include
CONNMARK target and connmark match support (Warning: Standard Debian™
and Ubuntu™ kernels are lacking that support!)."
it means MultiISP wont work properly if i am using Ubuntu server. if
yes whats the
2019 Sep 15
3
[Bug 1365] New: nft crashes in chain_print_declaration()
https://bugzilla.netfilter.org/show_bug.cgi?id=1365
Bug ID: 1365
Summary: nft crashes in chain_print_declaration()
Product: nftables
Version: unspecified
Hardware: x86_64
OS: All
Status: NEW
Severity: normal
Priority: P5
Component: nft
Assignee: pablo at netfilter.org
2013 Aug 06
0
[ANNOUNCE] libnetfilter_conntrack 1.0.4 release
Hi!
The Netfilter project proudly presents:
libnetfilter_conntrack 1.0.4
libnetfilter_conntrack is a userspace library providing a programming
interface (API) to the in-kernel connection tracking state table. This
library is currently used by conntrack-tools and iptables, among other
applications.
This release includes connlabel support, one memleak fix and fixes in
the comparison API.
2017 May 21
3
[Bug 1150] New: Iptables fails to match rules with malloc perturberation activated
https://bugzilla.netfilter.org/show_bug.cgi?id=1150
Bug ID: 1150
Summary: Iptables fails to match rules with malloc
perturberation activated
Product: iptables
Version: unspecified
Hardware: x86_64
OS: All
Status: NEW
Severity: enhancement
Priority: P5
Component:
2013 Aug 06
0
[ANNOUNCE] conntrack-tools 1.4.2 release
Hi!
The Netfilter project proudly presents:
conntrack-tools 1.4.2
The conntrack-tools are the userspace command line interface
`conntrack' and the userspace daemon `conntrackd'. The conntrack
utility replaces the old /proc/net/nf_conntrack interface. With
conntrack, you can dump, modify and delete entries from the connection
tracking state table from userspace. On the other
2016 Apr 19
0
[Bug 1032] nftables-0.5 fails to import ip6 tables when loopback address provided as both src and dst addr
https://bugzilla.netfilter.org/show_bug.cgi?id=1032
Florian Westphal <fw at strlen.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |FIXED
--
You are receiving this mail because:
You are
2024 Nov 18
0
[Bug 1584] nft large sets load high memory requirements
https://bugzilla.netfilter.org/show_bug.cgi?id=1584
--- Comment #9 from Pablo Neira Ayuso <pablo at netfilter.org> ---
more improvements in userspace:
20f1c60ac8c8 src: collapse set element commands from parser
193faa5475a5 json: collapse set element commands from parser
depending on ruleset pattern.
Kernel patches also got merge to reduce memory consumption:
commit
2020 Oct 14
0
[Bug 1476] New: xtables-monitor --trace segfaults running inside a container
https://bugzilla.netfilter.org/show_bug.cgi?id=1476
Bug ID: 1476
Summary: xtables-monitor --trace segfaults running inside a
container
Product: bugzilla
Version: other
Hardware: x86_64
OS: All
Status: NEW
Severity: enhancement
Priority: P5
Component: netfilter
2013 Apr 21
2
[Bug 812] addrtype with limit-iface-in in ip6tables/nat/PREROUTING messes up the route cache
https://bugzilla.netfilter.org/show_bug.cgi?id=812
Florian Westphal <fw at strlen.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |fw at strlen.de
--- Comment #1 from Florian Westphal <fw at strlen.de> 2013-04-21 16:48:04 CEST ---
2004 Sep 24
2
CONNMARK problem
Hello everybody.
i have the folowing problem:
i have this in the top of PREROUTING chain in mangle table
iptables -t mangle -A PREROUTING -j CONNMARK --set-mark 0 # rule 1
iptables -t mangle -A PREROUTING -m connmark --mark 5 # rule 2
iptables -t mangle -A PREROUTING -m connmark --mark 6 # rule 3
i think when packet is passing trough my POSTROUTING in mangle table