Re: 2.4 kernels and max # of rules with iptables

[Josh Grebe <josh@brokedown.net>]

[-- Attachment #1: Type: text/plain, Size: 983 bytes --]

I guess that would help...

kmalloc failed, size of kreplsize is 939608



David S. Miller wrote:
> From: Josh Grebe <josh@brokedown.net>
> Date: Wed, 17 Aug 2005 08:06:06 -0500
> 
> 
>>I threw a little printk patch at Jason and we determined that to be 
>>correct. In do_netfilter_replace(), on about line 2924, the call
>>        krepl = (struct ipt_replace *)kmalloc(kreplsize, GFP_KERNEL);
>>results in krepl being NULL after a pile of rules have been added.
>>
>>I compiled a statically linked iptables binary and Jason was able to 
>>add over 7k rules before he stopped it, the 32 bit iptables bombs 
>>before 900 rules.
>>
>>As far as changing this behaviour, I plead ignorance.
> 
> 
> So how large was kreplsize in the failing call?
> -
> To unsubscribe from this list: send the line "unsubscribe sparclinux" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> 
> !DSPAM:43038246130492096615112!
> 

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 256 bytes --]