nfq_bind_pf(foo, PF_INET6) fails

nfq_bind_pf(foo, PF_INET6) fails

[Johannes Gilger]

Hi netfilter-list,

I'm trying to adapt a legacy IPv4 NFQUEUE handler to support IPv6 as
well. As far as I understood the documentation I have to do:

nfq_unbind_pf(handle, AF_INET6);
nfq_bind_pf(handle, AF_INET6);

Which returns -1 in both cases. Simply ignoring the return value for
bind_pf is no solution either. I don't know where else to look, as the
program works fine when using AF_INET instead of AF_INET6.

I'm using the 2.6.38-10-generic-tuxonice (Ubuntu 11.04), x86_64. Modules
nfnetlink, nfnetlink_queue, ip_queue, ip6_queue are loaded. Any pointers
would be greatly appreciated.

Regards,
Jojo

(Please CC me, I'm not subscribed to the list)

-- 
Dipl.-Inform. Johannes Gilger
Research Group IT-Security
UMIC Research Centre
RWTH Aachen University
Mies-van-der-Rohe-Straße 15
52074 Aachen

Office: 211
Phone: +49 241 80 20781
Fax:   +49 241 80 22731

http://itsec.rwth-aachen.de

Re: nfq_bind_pf(foo, PF_INET6) fails

[Johannes Gilger]

On 17/08/11 09:32, Johannes Gilger wrote:
> nfq_unbind_pf(handle, AF_INET6);
> nfq_bind_pf(handle, AF_INET6);
> 
> I'm using the 2.6.38-10-generic-tuxonice (Ubuntu 11.04), x86_64. Modules
> nfnetlink, nfnetlink_queue, ip_queue, ip6_queue are loaded. Any pointers
> would be greatly appreciated.

Nevermind, it works now, after I unloaded ip_queue resp. ip6_queue.
Modules now look like this:

nfnetlink_queue
nfnetlink_log
nf_conntrack_netlink
nf_conntrack
nfnetlink
ip6table_filter
ip6_tables
iptable_filter
ip_tables
x_tables
 
Regards,
Jojo

-- 
Dipl.-Inform. Johannes Gilger
Research Group IT-Security
UMIC Research Centre
RWTH Aachen University
Mies-van-der-Rohe-Straße 15
52074 Aachen

Office: 211
Phone: +49 241 80 20781
Fax:   +49 241 80 22731

http://itsec.rwth-aachen.de