From: "Linus Lüssing" <linus.luessing@web.de>
To: netfilter@vger.kernel.org
Subject: errors with ebtables 2.0.8-2 in dmesg (tried OpenWRT)
Date: Mon, 25 May 2009 00:06:52 +0200 [thread overview]
Message-ID: <20090524220651.GA5730@Linus-Debian> (raw)
[-- Attachment #1: Type: text/plain, Size: 1065 bytes --]
I'm trying to do some DHCP/ARP filtering here on my little router
running OpenWRT svn-rev. 15336. When I'm trying to insert a rule
like this:
"ebtables -A INPUT --in-interface bat0 --protocol IPv4
--ip-protocol udp --ip-source-port 68 -j DROP"
then I get the following reply:
"The kernel doesn't support a certain ebtables extension, consider
recompiling your kernel or insmod the extension."
And in dmesg: "eb_tables: ip match: invalid size 32 != 28"
A rule like "ebtables -I INPUT --in-interface bat0 --protocol ARP
-j DROP" results in the dmesg output "eb_tables: standard target:
invalid size 8 != 4".
The error posted on this mailing-list seems to be similar:
http://osdir.com/ml/linux.network.bridge.ebtables.devel/2006-12/msg00001.html
Is this a bug in ebtables in general (or related to my OpenWRT
firmware)? Is ebtables an active project at the moment anyway?
Seems like the last bugfixes have been quite a long time ago.
But as far as I know, I can't use iptables with physdev to filter
ARP for example.
Cheers, Linus
[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 835 bytes --]
reply other threads:[~2009-05-24 22:06 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20090524220651.GA5730@Linus-Debian \
--to=linus.luessing@web.de \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.