From: Maarten Vanraes <maarten@ba.be>
To: netfilter@vger.kernel.org
Cc: Jan Engelhardt <jengelh@medozas.de>, Bob Miller <bob@computerisms.ca>
Subject: Re: xtables-addons ACCOUNT
Date: Wed, 20 Oct 2010 15:03:14 +0200 [thread overview]
Message-ID: <201010201503.14624.maarten@ba.be> (raw)
In-Reply-To: <alpine.LNX.2.01.1010201116060.3551@obet.zrqbmnf.qr>
Op woensdag 20 oktober 2010 11:16:29 schreef Jan Engelhardt:
> On Wednesday 2010-10-20 10:25, Maarten Vanraes wrote:
> >> > ACCOUNT: Table publicnet found, but IP/netmask mismatch. IP/netmask
> >> > found: 194.0.234.0/255.255.255.0
> >> > ACCOUNT: Table insert problem. Aborting
> >
> >this error message is due to a previous publicnet rule, and it can't seem
> >to find the matching network. even though it is the same one. (i suspect
> >it is due to network being 194.0.234.0/24 and the matcher is checking
> >194.0.234.0/255.255.255.0 ). also i suspect there is a another bug when
> >removing the rule that the matcher can't find the correct one (also due to
> >different netmask notations?) and thus not everything is removed which
> >means that i can't reinsert that one.
>
> Do you have a minimal testcase available?
machine is rebooted, no iptables yet, no modules loaded.
[]# iptables -t mangle -I POSTROUTING -j ACCOUNT --addr 0.0.0.0/0 --tname self
iptables: Invalid argument. Run `dmesg' for more information.
[]# iptables -I FORWARD -j ACCOUNT --addr 194.0.234.0/24 --tname publicnet
iptables: Invalid argument. Run `dmesg' for more information.
dmesg is empty.
lsmod shows that xt_ACCOUNT is loaded into memory.
next prev parent reply other threads:[~2010-10-20 13:03 UTC|newest]
Thread overview: 17+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-10-18 15:12 xtables-addons ACCOUNT Maarten Vanraes
2010-10-18 16:18 ` Bob Miller
2010-10-18 16:32 ` Bob Miller
2010-10-19 8:09 ` Maarten Vanraes
2010-10-19 9:38 ` Jan Engelhardt
2010-10-19 10:00 ` Maarten Vanraes
2010-10-19 16:45 ` Bob Miller
2010-10-20 8:25 ` Maarten Vanraes
2010-10-20 9:16 ` Jan Engelhardt
2010-10-20 13:03 ` Maarten Vanraes [this message]
2010-10-20 17:36 ` Jan Engelhardt
2010-10-21 11:31 ` Maarten Vanraes
2010-10-27 20:28 ` Jan Engelhardt
2010-10-28 7:32 ` Maarten Vanraes
2010-10-28 22:20 ` Jan Engelhardt
2010-10-29 7:31 ` Maarten Vanraes
-- strict thread matches above, loose matches on Subject: below --
2010-10-25 7:35 Maarten Vanraes
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=201010201503.14624.maarten@ba.be \
--to=maarten@ba.be \
--cc=bob@computerisms.ca \
--cc=jengelh@medozas.de \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.