xtables-1.5.2 not working

xtables-1.5.2 not working

[Filippo Zangheri]

Hi,

I'm new to netfilter-dev ml and to netfilter development in general.
Today I'm testing xtables-1.5.2.

OS: Debian "Etch" 4.0

filippo@master:~/repos/xtables-dev$ uname -a
Linux master 2.6.24.3-fz-20080226 #1 SMP Tue Feb 26 15:12:50 CET 2008 i686 GNU/Linux

Before building xtables, I removed ip{,6}tables-1.3.6 (which is the version shipped with
my distro until now).

I cloned xtables-{dev,addons} git repos then built xtables without strange parameters:

../autogen.sh
../configure --prefix=/usr
make
sudo make install

I can see all libraries were successfully created in /usr/libexec/xtables, all
executables in /usr/{s,}bin, and all header files in /usr/include{,/libiptc}.

Now, all attempts to set an iptables rule fail with either segmentation fault:

filippo@master:~/repos/xtables-dev$ sudo /usr/sbin/iptables -A INPUT -i lo -j ACCEPT
Segmentation fault
filippo@master:~/repos/xtables-dev$ dmesg
iptables[19575]: segfault at 00000000 eip 0804d1b0 esp bfa585b0 error 6

or this kind of error message:

iptables-restore v1.5.2: Couldn't load target `standard':/usr/libexec/xtables/libipt_standard.so: cannot open shared object file: No such file or directory

Well, that's normal - there's no such library - so after issuing:

filippo@master:~/repos/xtables-dev$ sudo mv /usr/libexec/xtables/lib{xt,ipt}_standard.so

I get the following error message:

iptables-restore v1.5.2: Couldn't load target `standard':(null)


Any hint?
Thank you so much for the great job, and It would be really great if the
official development tree moved to Git.

Best regards.


-- 
Filippo Zangheri

GPG key ID: 0xE1D879FA
Key fingerprint: 816B CE57 D43C 0A47 EF35 3378 EA5F A72A E1D8 79FA
Key server: pgp.mit.edu

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GE d- s+:- a-- C++ UL+++ P+ L+++ E-- W+ N* o-- K- w--- O-- M--
V- PS++ PE+ Y+ PGP++ t 5-- X++ R* tv b+ DI-- D---- G-- e++ h--
r++ z*
------END GEEK CODE BLOCK------

Re: xtables-1.5.2 not working

[Jan Engelhardt]

On Mar 5 2008 10:37, Filippo Zangheri wrote:
>
>Now, all attempts to set an iptables rule fail with either
>segmentation fault:
>
>filippo@master:~/repos/xtables-dev$ sudo /usr/sbin/iptables -A INPUT -i lo -j ACCEPT
>Segmentation fault
>filippo@master:~/repos/xtables-dev$ dmesg
>iptables[19575]: segfault at 00000000 eip 0804d1b0 esp bfa585b0 error 6

Thanks for the report!
I fixed this in 3474f7db.. (master); find_match was incorrectly called
when we tried to load libxt_standard (a target actually).


>iptables-restore v1.5.2: Couldn't load target
>`standard':/usr/libexec/xtables/libipt_standard.so: cannot open
>shared object file: No such file or directory
>
>Well, that's normal - there's no such library - so after issuing:

Internally it tries libxt_<foo> beforehand. Only if that does not
exist, it will skip to libipt_<foo> and then report an error.
But *if* libxt_<foo> exists, it will print the appropriate dlopen
error message — it just did not happen in this case because the
dlopen succeeded while the line after it did not.
So this message was a result of the previous wronglet.


thanks,
Jan
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: xtables-1.5.2 not working

[Filippo Zangheri]

Jan Engelhardt ha scritto:
> Thanks for the report!
> I fixed this in 3474f7db.. (master); find_match was incorrectly called
> when we tried to load libxt_standard (a target actually).

Ack. Thank you!


-- 
Filippo Zangheri

GPG key ID: 0xE1D879FA
Key fingerprint: 816B CE57 D43C 0A47 EF35 3378 EA5F A72A E1D8 79FA
Key server: pgp.mit.edu

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GE d- s+:- a-- C++ UL+++ P+ L+++ E-- W+ N* o-- K- w--- O-- M--
V- PS++ PE+ Y+ PGP++ t 5-- X++ R* tv b+ DI-- D---- G-- e++ h--
r++ z*
------END GEEK CODE BLOCK------