BUG ip6tables and helper

BUG ip6tables and helper

[Noel Butler]

[-- Attachment #1: Type: text/plain, Size: 269 bytes --]

Hi Pablo,

Bug with ip6tables and helpers

-j CT --helper irc

ip6tables: No chain/target/match by that name.


This *does* work with iptables


On 22/11/2013 22:12, Pablo Neira Ayuso wrote:
> Hi! The Netfilter project proudly presents: iptables 1.4.21


[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 490 bytes --]

Re: BUG ip6tables and helper

[Pablo Neira Ayuso]

Hi Noel,

On Thu, Dec 19, 2013 at 05:35:38PM +1000, Noel Butler wrote:
> Hi Pablo,

Please, CC me if this is addressed to me. I read all mailing lists
quite often but I have lots of email and chances are this gets lost
increases.

> Bug with ip6tables and helpers
> 
> -j CT --helper irc
> 
> ip6tables: No chain/target/match by that name.
> 
> This *does* work with iptables

I sent this patch time ago, just compiled tested:

http://www.spinics.net/lists/netfilter/msg54642.html

But got no feedback on it. Could you take it, give it a try and let me
know if it fixes this issue? Thanks!

Re: BUG ip6tables and helper

[Noel Butler]

[-- Attachment #1: Type: text/plain, Size: 1042 bytes --]

Hi Pablo,

Thanks, patched.
build:        OK
execute:   OK
work for remote users:   time will tell :)


On Thu, 2013-12-19 at 10:22 +0100, Pablo Neira Ayuso wrote: 
> Hi Noel,
> 
> On Thu, Dec 19, 2013 at 05:35:38PM +1000, Noel Butler wrote:
> > Hi Pablo,
> 
> Please, CC me if this is addressed to me. I read all mailing lists
> quite often but I have lots of email and chances are this gets lost
> increases.
> 
> > Bug with ip6tables and helpers
> > 
> > -j CT --helper irc
> > 
> > ip6tables: No chain/target/match by that name.
> > 
> > This *does* work with iptables
> 
> I sent this patch time ago, just compiled tested:
> 
> http://www.spinics.net/lists/netfilter/msg54642.html
> 
> But got no feedback on it. Could you take it, give it a try and let me
> know if it fixes this issue? Thanks!
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html



[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 490 bytes --]

[ANNOUNCE] iptables 1.4.21 release

[Pablo Neira Ayuso]

[-- Attachment #1: Type: text/plain, Size: 872 bytes --]

Hi!

The Netfilter project proudly presents:

        iptables 1.4.21

iptables is the userspace command line program used to configure the
Linux packet filtering ruleset. It is targeted towards system administrators.
Since Network Address Translation is also configured from the packet filter
ruleset, iptables is used for this, too. The iptables package also includes
ip6tables. ip6tables is used for configuring the IPv6 packet filter.

This release includes fixes and a couple of new features:

* --nowildcard option for xt_socket, available since Linux kernel 3.11,
  from Eric Dumazet.

* SYNPROXY support, available since Linux kernel 3.12, from Patrick McHardy.

See ChangeLog that comes attached to this email for more details.

You can download it from:

http://www.netfilter.org/projects/iptables/downloads.html
ftp://ftp.netfilter.org/pub/iptables/

Have fun!

[-- Attachment #2: changes-iptables-1.4.21.txt --]
[-- Type: text/plain, Size: 1719 bytes --]

Eric Dumazet (1):
      xt_socket: add --nowildcard flag

Florian Westphal (3):
      extensions: libxt_socket: update man page
      doc: add libnetfilter_queue pointer to libxt_NFQUEUE.man
      doc: merge ip6table man pages into ipv4 ones

Jozsef Kadlecsik (1):
      extensions: libxt_set, libxt_SET: check the set family too

Kevin Cernekee (1):
      ip6tables: Use consistent exit code for EAGAIN

Laurence J. Lane (8):
      iptables: libxt_hashlimit.man: correct address
      iptables: libxt_conntrack.man extraneous commas
      iptables: libip(6)t_REJECT.man default icmp types
      iptables: iptables-xm1.1 correct man section
      iptables: libxt_recent.{c,man} dead URL
      iptables: libxt_string.man add examples
      extensions: libxt_LOG: use generic syslog reference in manpage
      iptables: extensions/GNUMakefile.in use CPPFLAGS

Lutz Jaenicke (1):
      iptables: correctly reference generated file

Pablo Neira Ayuso (7):
      Merge branch 'stable-1.4.20'
      Merge branch 'stable-1.4.20'
      ip[6]tables: fix incorrect alignment in commands_v_options
      build: add software version to manpage first line at configure stage
      extensions: libxt_cluster: add note on arptables-jf
      utils: nfsynproxy: fix error while compiling the BPF filter
      iptables 1.4.21 release

Patrick McHardy (2):
      extensions: add SYNPROXY extension
      utils: add nfsynproxy tool

Phil Oester (4):
      iptables: state match incompatibilty across versions
      libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks
      iptables: improve chain name validation
      iptables: spurious error in load_extension

stephen hemminger (1):
      xtables: trivial spelling fix

BUG ip6tables and helper

[Noel Butler]

Hi Pablo,

Bug with ip6tables and helpers

-j CT --helper irc

ip6tables: No chain/target/match by that name.


This *does* work with iptables


On 22/11/2013 22:12, Pablo Neira Ayuso wrote:

> Hi!
> 
> The Netfilter project proudly presents:
> 
> iptables 1.4.21

Re: BUG ip6tables and helper

[Florian Westphal]

Noel Butler <noel.butler@ausics.net> wrote:
> Bug with ip6tables and helpers
> 
> -j CT --helper irc
> 
> ip6tables: No chain/target/match by that name.
> 
> This *does* work with iptables

Yes, nf_conntrack_irc is ipv4 only at this time.