* maximum number of iptables rules?
@ 2003-11-12 23:18 px
2003-11-12 23:25 ` Antony Stone
0 siblings, 1 reply; 6+ messages in thread
From: px @ 2003-11-12 23:18 UTC (permalink / raw)
To: netfilter; +Cc: dom
Hi, me and a buddy of mine are working on a perl script to automate
blocking of about 3000 IP addresses.
The script works fine on his box, x86. But on my box, sparc, I seem to
have a limitation of 854 rules before I start to get errors and am
unable to add anymore rules.
Is there a maximum number of rules per chain? or overall?
Here is the information on my Sparc box.
> null:~# iptables -t filter -I INPUT 1 -s 66.28.224.0/19 -p all -j blockme
> iptables: Memory allocation problem
> null:~# iptables -t filter -I INPUT 1 -s 1.2.3.4/19 -p all -j blockme
> iptables: Memory allocation problem
> null:~# uname -a
> Linux null 2.4.21 #1 Thu Aug 7 20:30:12 EDT 2003 sparc64 GNU/Linux
> null:~#
> null:~# iptables -L blockme
> Chain blockme(854 references)
> target prot opt source destination
> DROP all -- anywhere anywhere
Here is the info about my buddy's. x86 box
> root@darkside:/etc/rc.d# uname -a; iptables -L blockme; iptables
> --version
> Linux darkside 2.5.50-ac1 #3 SMP Sun Feb 9 10:21:53 PST 2003 i686
> unknown
> Chain blockme(3966 references)
> target prot opt source destination
> DROP all -- anywhere anywhere
> iptables v1.2.7a
Any help is greatly appreciated.
-r0b
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: maximum number of iptables rules?
2003-11-12 23:18 maximum number of iptables rules? px
@ 2003-11-12 23:25 ` Antony Stone
0 siblings, 0 replies; 6+ messages in thread
From: Antony Stone @ 2003-11-12 23:25 UTC (permalink / raw)
To: netfilter
On Wednesday 12 November 2003 11:18 pm, px wrote:
> Hi, me and a buddy of mine are working on a perl script to automate
> blocking of about 3000 IP addresses.
> The script works fine on his box, x86. But on my box, sparc, I seem to
> have a limitation of 854 rules before I start to get errors and am
> unable to add anymore rules.
Tell us more about both machines - especially how much memory they each have.
Antony.
--
If books were designed by Microsoft, the Anarchist's Cookbook would explode
when you read it.
- Mark W Schumann
Please reply to the list;
please don't CC me.
^ permalink raw reply [flat|nested] 6+ messages in thread
* maximum number of iptables rules?
@ 2003-11-12 23:40 px
2003-11-13 1:12 ` pptp broken after POM John Paul
0 siblings, 1 reply; 6+ messages in thread
From: px @ 2003-11-12 23:40 UTC (permalink / raw)
To: netfilter; +Cc: dom
Hi, me and a buddy of mine are working on a perl script to automate
blocking of about 3000 IP addresses.
The script works fine on his box, x86. But on my box, sparc, I seem to
have a limitation of 854 rules before I start to get errors and am
unable to add anymore rules.
Is there a maximum number of rules per chain? or overall?
Here is the information on my Sparc box.
> null:~# iptables -t filter -I INPUT 1 -s 66.28.224.0/19 -p all -j blockme
> iptables: Memory allocation problem
> null:~# iptables -t filter -I INPUT 1 -s 1.2.3.4/19 -p all -j blockme
> iptables: Memory allocation problem
> null:~# uname -a
> Linux null 2.4.21 #1 Thu Aug 7 20:30:12 EDT 2003 sparc64 GNU/Linux
> null:~#
> null:~# iptables -L blockme
> Chain blockme(854 references)
> target prot opt source destination
> DROP all -- anywhere anywhere
Here is the info about my buddy's. x86 box
> root@darkside:/etc/rc.d# uname -a; iptables -L blockme; iptables
> --version
> Linux darkside 2.5.50-ac1 #3 SMP Sun Feb 9 10:21:53 PST 2003 i686
> unknown
> Chain blockme(3966 references)
> target prot opt source destination
> DROP all -- anywhere anywhere
> iptables v1.2.7a
Any help is greatly appreciated.
-r0b
PS.
Wow, I'm sorry forgot to put that. Im spacey today.
My friends x86 linux box has, 256
My sparc box has 512.
-r0b
^ permalink raw reply [flat|nested] 6+ messages in thread
* pptp broken after POM
2003-11-12 23:40 maximum number of iptables rules? px
@ 2003-11-13 1:12 ` John Paul
2003-11-13 2:17 ` Michael Kearey
2003-11-13 2:31 ` John Paul
0 siblings, 2 replies; 6+ messages in thread
From: John Paul @ 2003-11-13 1:12 UTC (permalink / raw)
To: netfilter
Hello Folks,
I got my PPTP working before patching my kernel with POM. Below is the log
when trying to connect to the vpn server. Am i missing something after the
POM patch?
iptables-1.2.9rc1
linux-2.4.22
Thanks.
PJ.
Nov 13 09:11:17 mail pppd[8395]: pppd 2.4.1 started by root, uid 0
Nov 13 09:11:17 mail pppd[8395]: using channel 3
Nov 13 09:11:17 mail pppd[8395]: Using interface ppp1
Nov 13 09:11:17 mail pppd[8395]: Connect: ppp1 <--> /dev/pts/3
Nov 13 09:11:17 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:19 mail pptpd[8394]: GRE: Discarding for incorrect call
Nov 13 09:11:20 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:22 mail pptpd[8394]: GRE: Discarding for incorrect call
Nov 13 09:11:23 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:26 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:26 mail pptpd[8394]: GRE: Discarding for incorrect call
Nov 13 09:11:29 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:30 mail pptpd[8394]: GRE: Discarding for incorrect call
Nov 13 09:11:32 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:34 mail pptpd[8394]: GRE: Discarding for incorrect call
Nov 13 09:11:35 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:38 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:38 mail pptpd[8394]: GRE: Discarding for incorrect call
Nov 13 09:11:41 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:42 mail pptpd[8394]: GRE: Discarding for incorrect call
Nov 13 09:11:44 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:46 mail pptpd[8394]: GRE: Discarding for incorrect call
Nov 13 09:11:47 mail pppd[8395]: LCP: timeout sending Config-Requests
Nov 13 09:11:47 mail pppd[8395]: Connection terminated.
Nov 13 09:11:47 mail pppd[8395]: Exit.
Nov 13 09:11:47 mail pptpd[8394]: GRE: read(fd=5,buffer=804d920,len=8196)
from PTY failed: status = -1 error = Input/output error
Nov 13 09:11:47 mail pptpd[8394]: CTRL: PTY read or GRE write failed
(pty,gre)=(5,6)
Nov 13 09:11:47 mail pptpd[8394]: CTRL: Client 10.10.0.99 control connection
finished
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: pptp broken after POM
2003-11-13 1:12 ` pptp broken after POM John Paul
@ 2003-11-13 2:17 ` Michael Kearey
2003-11-13 2:31 ` John Paul
1 sibling, 0 replies; 6+ messages in thread
From: Michael Kearey @ 2003-11-13 2:17 UTC (permalink / raw)
Cc: netfilter
Hi John,
Do those of us that use a threading mail client, and yourself a favour..
When you START a NEW thread (New subject etc) please do not REPLY to a
message received and change it's subject line. Compose a new messge,
and your NEW subject will not be buried in 'maximum number of iptables
rules?' thread.
Cheers,
Michael
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: pptp broken after POM
2003-11-13 1:12 ` pptp broken after POM John Paul
2003-11-13 2:17 ` Michael Kearey
@ 2003-11-13 2:31 ` John Paul
1 sibling, 0 replies; 6+ messages in thread
From: John Paul @ 2003-11-13 2:31 UTC (permalink / raw)
To: John Paul, netfilter
oooopss... sorry for answering my own query. i have found the problem and
has been fixed :-) i was previously using the old .so.
----- Original Message -----
From: "John Paul" <john@pinoylinux.sytes.net>
To: <netfilter@lists.netfilter.org>
Sent: Thursday, November 13, 2003 9:12 AM
Subject: pptp broken after POM
> Hello Folks,
>
> I got my PPTP working before patching my kernel with POM. Below is the log
> when trying to connect to the vpn server. Am i missing something after the
> POM patch?
>
> iptables-1.2.9rc1
> linux-2.4.22
>
> Thanks.
> PJ.
>
> Nov 13 09:11:17 mail pppd[8395]: pppd 2.4.1 started by root, uid 0
> Nov 13 09:11:17 mail pppd[8395]: using channel 3
> Nov 13 09:11:17 mail pppd[8395]: Using interface ppp1
> Nov 13 09:11:17 mail pppd[8395]: Connect: ppp1 <--> /dev/pts/3
> Nov 13 09:11:17 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
> <auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
> Nov 13 09:11:19 mail pptpd[8394]: GRE: Discarding for incorrect call
> Nov 13 09:11:20 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
> <auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
> Nov 13 09:11:22 mail pptpd[8394]: GRE: Discarding for incorrect call
> Nov 13 09:11:23 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
> <auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
> Nov 13 09:11:26 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
> <auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
> Nov 13 09:11:26 mail pptpd[8394]: GRE: Discarding for incorrect call
> Nov 13 09:11:29 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
> <auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
> Nov 13 09:11:30 mail pptpd[8394]: GRE: Discarding for incorrect call
> Nov 13 09:11:32 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
> <auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
> Nov 13 09:11:34 mail pptpd[8394]: GRE: Discarding for incorrect call
> Nov 13 09:11:35 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
> <auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
> Nov 13 09:11:38 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
> <auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
> Nov 13 09:11:38 mail pptpd[8394]: GRE: Discarding for incorrect call
> Nov 13 09:11:41 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
> <auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
> Nov 13 09:11:42 mail pptpd[8394]: GRE: Discarding for incorrect call
> Nov 13 09:11:44 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
> <auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
> Nov 13 09:11:46 mail pptpd[8394]: GRE: Discarding for incorrect call
> Nov 13 09:11:47 mail pppd[8395]: LCP: timeout sending Config-Requests
> Nov 13 09:11:47 mail pppd[8395]: Connection terminated.
> Nov 13 09:11:47 mail pppd[8395]: Exit.
> Nov 13 09:11:47 mail pptpd[8394]: GRE: read(fd=5,buffer=804d920,len=8196)
> from PTY failed: status = -1 error = Input/output error
> Nov 13 09:11:47 mail pptpd[8394]: CTRL: PTY read or GRE write failed
> (pty,gre)=(5,6)
> Nov 13 09:11:47 mail pptpd[8394]: CTRL: Client 10.10.0.99 control
connection
> finished
>
>
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2003-11-13 2:31 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2003-11-12 23:40 maximum number of iptables rules? px
2003-11-13 1:12 ` pptp broken after POM John Paul
2003-11-13 2:17 ` Michael Kearey
2003-11-13 2:31 ` John Paul
-- strict thread matches above, loose matches on Subject: below --
2003-11-12 23:18 maximum number of iptables rules? px
2003-11-12 23:25 ` Antony Stone
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.