similar to: [Bridge] Re: [RESEND][PATCH] ebtables: clean up vmalloc usage in net/bridge/netfilter/ebtables.c

http://bugzilla.netfilter.org/show_bug.cgi?id=777 Summary: Suspect bug in __do_replace() Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: All Status: NEW Severity: minor Priority: P5 Component: ip_tables (kernel) AssignedTo: netfilter-buglog at lists.netfilter.org

http://bugzilla.netfilter.org/show_bug.cgi?id=728 Summary: ip_tables: limit match: invalid size 40!=48 Product: netfilter/iptables Version: linux-2.6.x Platform: mips64 OS/Version: Debian GNU/Linux Status: NEW Severity: critical Priority: P2 Component: ip_tables (kernel) AssignedTo:

[Re-sending to the ext3 list, with minor edits] I'm in the process of fixing errors generated by the Coverity tool on the Linux kernel, and I would like your comment on a set of problems reported in ext3. The main issue reported is not checking the return code of ext3_journal_get_write_access() in various places. I would like to know if there should be error handling in these cases. The

https://bugzilla.netfilter.org/show_bug.cgi?id=1432 Bug ID: 1432 Summary: ebtables ebtables-2.0.11 buffer overflow on getting kernel data ( ebtables compiled with address sanitizer) Product: netfilter/iptables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status:

Hi, At http://sourceforge.net/projects/ebtables/ you can find the following new releases: ebtables-brnf-3-vs-2.4.22 Changes: - let iptables see VLAN tagged IP traffic - bugfix for queued packets that get mangled in userspace - ebt_among module (Grzegorz Borowiak) - ebt_limit module (Tom Marshall) The patch compiles but I've done no further tests, but I probably didn't screw up.

https://bugzilla.netfilter.org/show_bug.cgi?id=1481 Bug ID: 1481 Summary: [ebtables-nft] ebtables -E gives error Product: iptables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: iptables Assignee:

Hi all, Is it possible to invoke an ebtables target from tc? Ie we can use the ''action ipt'' to invoke an IPTables target, but I was wanting to use an ebtables target instead. Is this possible? Regards, Leigh Leigh Sharpe Network Systems Engineer Pacific Wireless Ph +61 3 9584 8966 Mob 0408 009 502 Helpdesk 1300 300 616 email lsharpe@pacificwireless.com.au web

Hi all, I have a couple of questions regarding tcng behavior. First - I want to mark TCP_ACK packets as high priority, a common case. I figured the tcp_ACK rule in fields4.tc would be enough but I''ve come across Jason Boxman''s tutorial and he recommends using: class( <$ack> ) if ip_len < 64 && ip_hl == 0x5 && (raw[33].b >> 4)

Hi Dave, Please apply this compiler warning fix from Randy. Signed-off-by: Bart De Schuymer <bdschuym@telenet.be> Signed-off-by: Randy Dunlap <rddunlap@osdl.org> diff -Naurp ./net/bridge/netfilter/ebt_ulog.c~brnetf_types ./net/bridge/netfilter/ebt_ulog.c --- ./net/bridge/netfilter/ebt_ulog.c~brnetf_types 2005-01-10 10:38:40.531343592 -0800 +++ ./net/bridge/netfilter/ebt_ulog.c

I need some help to configure a secure network on my Xen server. I have been looking online and it seems a I need a routed network. But I am having a terrible time implementing it. My setup: Xen 3.4.2 CentOS 5.5 Dom0 1 NIC (eth0) All guests will be HVM What I want to do is something similar to a firewall and port forwarding. e.g. DomU.1 has DHCP address of 10.0.0.50 (DHCP matches MAC to

Hi there, I am new to ebtables code and looking for some help related to locking and atomicity. I am using Xen 3.0.4 in bridge mode and interested in looking into the packets intercepted by dom0 ebtables code, extract some information, pass this information to userspace, wait for userspace response and then pass the result back to ebtable code. Everything seemed to be working fine until i

Hello, I have an issue with ebtables --arp-opcode and vlan support on the bridge. Ebtables support --arp-opcode witch is used for arp manipulation. ebtables -t nat -A PREROUTING -p arp --arp-opcode Request -j arpreply --arpreply-mac 10:11:12:13:14:15 --arpreply-target ACCEPT -i eth1 But it does not work when Ethernet frame comes tag with vlan pid. Can i overcome this limitation? Fanks

Hiall! Is there un updated patch for bridge/nf/ebtables for 2.4.27? I tried the patch for 2.4.26 but there were several rejects. Then I patched in the rejects by hand and it zorked, at leqst for now. But to be sure I want someone with knowledge to update the patch instead of me nokey ;-) Best wishes Norbert -------------------------------------------------------------------------------

Hi everyone, I am working on packet filtering at mac layer. I want to use ebtables. I am using Fedora core 2. But I am unable use the ebtables eventhough all the modules are enabled at the time of kernel compilation. Plz suggest me how to use ebtables in Fedora core 2 Phani

Hello, has anyone done any performance measuring of Linux Bridge + firewalling? I did search the net for a long time, to find out what would be the best way to measure the (maximum) performance/throughput. I didn't really come to a conclusion I'm satisfied with. Nevertheless I did create a small bridged test setup with 4 servers (gbit nics) and a linux bridge (2 x 100 mbit nic), all on

On Mon, Dec 02, 2019 at 08:30:25PM +0100, Jan Engelhardt wrote: > On Monday 2019-12-02 16:33, Pablo Neira Ayuso wrote: > > >You can download it from: > > > >ftp://ftp.netfilter.org/pub/ebtables/ > > There is a file called ebtables-2.0.11.tar.bz2 in there, but this is > actually a gz encoded object. (This confuses rpmbuild, which tries > to `bzip2 -d` it.)

https://bugzilla.netfilter.org/show_bug.cgi?id=1316 Bug ID: 1316 Summary: ebtables-nft support for broute Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: iptables over nftable Assignee: pablo at

Dear all, I configure my kvm vm like this: <interface type='bridge'> <mac address='52:54:00:dd:b2:c5'/> <source bridge='nw-vpc-1017'/> <target dev='if-57'/> <model type='virtio'/> <filterref filter='clean-traffic'> <parameter name='IP'

Hi, On 11-04-2015 06:00, Mehmet Allar wrote: > Hello , > > I have recently downloaded and setup Centos 7 1503 on a device and > encountered a remote connection problem which I was only able to solve via > removing ebtables package . > > After setup , I wanted go forward with IPtables instead of Firewalld , so > remove firewalld and install iptables. After configuration and

On 4/11/2015 2:00 AM, Mehmet Allar wrote: > After setup , I wanted go forward with IPtables instead of Firewalld , so > remove firewalld and install iptables. After configuration and tests , I > installed Fail2Ban ,(which brought ebtables with it ) and after reboot I > was not able to connect to the device. where did you install fail2ban from? I don't believe its in the C7 base