From: Amin Azez <azez@ufomechanic.net>
To: Pablo Neira <pablo@eurodev.net>
Cc: netfilter-devel@lists.netfilter.org,
'Krisztian Kovacs' <hidden@sch.bme.hu>
Subject: Re: BUG/CONFLICT conntrack with preroute/postroute mangle table
Date: Mon, 09 May 2005 12:11:43 +0100 [thread overview]
Message-ID: <427F456F.50407@ufomechanic.net> (raw)
In-Reply-To: <427A4457.7010509@eurodev.net>
Pablo Neira wrote:
> This bug can be reproduced if you use iptables < 1.3.1, since I
> personally sent a patch to remove any nfcache references in iptables
> code.
>
> https://lists.netfilter.org/pipermail/netfilter-devel/2005-February/018463.html
>
>
> Yes, It's a matter of removing that line. thanks for pointing out this.
>
> Krisztian, I think that this could be source of weird behaviours in
> ct_sync if your users use old iptables versions.
iptables refers to some kernel-side and some user-side code.
When you say "iptables<1.3.1" which are you talking about? User side?
(I've inherited use of 1.2.11 for historical reasons though I'm hoping
to change that)
Is it a requirement to update to iptables 1.3.1 user space applications
to avoid other instances of this bug?
Does a patch for this "one liner" need submitting to the list as
Subject: [PATCH], to get signed off by anyone at all?
What is the procedure to ensure that this fix reaches the kernel properly?
Amin
next prev parent reply other threads:[~2005-05-09 11:11 UTC|newest]
Thread overview: 24+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-04-19 13:37 nfnetlink/ctnetlink from pom-ng r3884 Wang Jian
2005-04-20 0:55 ` Pablo Neira
2005-04-21 8:21 ` Wang Jian
2005-04-21 11:05 ` Pablo Neira
2005-04-21 11:29 ` Wang Jian
2005-04-20 13:41 ` Amin Azez
2005-04-20 14:17 ` Samuel Liddicott
2005-04-20 22:44 ` Pablo Neira
2005-04-21 8:07 ` Amin Azez
2005-04-21 9:25 ` extending conntrack event data Amin Azez
2005-04-21 9:49 ` Amin Azez
2005-04-21 10:14 ` Wang Jian
2005-04-21 11:04 ` Pablo Neira
2005-04-25 13:51 ` Amin Azez
2005-04-25 16:35 ` IPCT_NEW comes from was " Amin Azez
2005-04-25 16:43 ` Amin Azez
2005-04-26 13:37 ` BUG/CONFLICT conntrack with preroute/postroute mangle table Samuel Liddicott
2005-04-26 13:38 ` Amin Azez
2005-05-05 11:08 ` Amin Azez
2005-05-05 13:36 ` RFC for fix? Was " Amin Azez
2005-05-05 16:05 ` Pablo Neira
2005-05-09 11:11 ` Amin Azez [this message]
2005-05-09 13:48 ` Amin Azez
2005-04-21 11:04 ` extending conntrack event data Amin Azez
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=427F456F.50407@ufomechanic.net \
--to=azez@ufomechanic.net \
--cc=hidden@sch.bme.hu \
--cc=netfilter-devel@lists.netfilter.org \
--cc=pablo@eurodev.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.