From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pablo Neira Subject: Re: New target: can't delete rule Date: Tue, 13 Sep 2005 01:24:21 +0200 Message-ID: <43260E25.6020600@eurodev.net> References: <1126116594.3690.35.camel@Pentium> <431F6A0E.1090707@eurodev.net> <1126553016.15667.0.camel@Pentium> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Cc: netfilter-devel@lists.netfilter.org Return-path: To: Gervasio Bernal In-Reply-To: <1126553016.15667.0.camel@Pentium> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org Gervasio Bernal wrote: > I did what you said, but I cannot make walk it. > > This is my libipt_CRYPT.c > > static struct iptables_target CRYPT > = { > .name = "CRYPT", > .version = IPTABLES_VERSION, > .size = IPT_ALIGN(sizeof(struct ipt_CRYPT_info)), > .userspacesize = offsetof(struct ipt_CRYPT_info, > table_alloc_ptr), > .help = &help, > .init = &init, > .parse = &parse, > .final_check = &final_check, > .print = &print, > .save = &save, > .extra_opts = opts > }; > > > This is my ipt_CRYPT.h > > struct ipt_CRYPT_info > { > char key[MAX_KEY_SIZE]; > unsigned int block_size; > unsigned int key_size; > > struct tabla_alloc* table_alloc_ptr; > }; > > struct tabla_alloc > { > struct crypto_tfm *tfm; > struct tabla_alloc* next; > struct tabla_alloc* ant; > }; It looks fine. Which iptables version are you using? If my mind servers well, I remember that there was a bug related with targets and the use of userspacesize in old iptables versions (<= 1.3.1). If so, please try with the lastest update. -- Pablo