* Problems with xtables-addons 1.3.7 on Gentoo @ 2011-08-05 13:19 Pandu Poluan 2011-08-05 13:41 ` nowhere 0 siblings, 1 reply; 10+ messages in thread From: Pandu Poluan @ 2011-08-05 13:19 UTC (permalink / raw) To: netfilter I'm having troubles with xtables-addons 1.3.7 on Gentoo. I successfully installed xtables-addons (no errors), but all attempts to create an IP set (e.g., `ipset --create test hash:ip`) resulted in the following error message: FATAL: Error inserting ip_set (/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko): Invalid module format `insmod` begat an additional information: insmod: error inserting '/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko': -1 Invalid module format `dmesg | tail -1` gave a worrying error: [ 4085.271442] ip_set: exports duplicate symbol ip_set_nfnl_put (owned by kernel) What should I do? Rgds, -- Pandu E Poluan ~ IT Optimizer ~ • Blog : http://pepoluan.tumblr.com • Linked-In : http://id.linkedin.com/in/pepoluan ^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: Problems with xtables-addons 1.3.7 on Gentoo 2011-08-05 13:19 Problems with xtables-addons 1.3.7 on Gentoo Pandu Poluan @ 2011-08-05 13:41 ` nowhere 2011-08-05 13:49 ` Pandu Poluan 0 siblings, 1 reply; 10+ messages in thread From: nowhere @ 2011-08-05 13:41 UTC (permalink / raw) To: Pandu Poluan; +Cc: netfilter В Птн, 05/08/2011 в 20:19 +0700, Pandu Poluan пишет: > I'm having troubles with xtables-addons 1.3.7 on Gentoo. > > I successfully installed xtables-addons (no errors), but all attempts > to create an IP set (e.g., `ipset --create test hash:ip`) resulted in > the following error message: > > FATAL: Error inserting ip_set > (/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko): > Invalid module format > > `insmod` begat an additional information: > > insmod: error inserting > '/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko': > -1 Invalid module format > > `dmesg | tail -1` gave a worrying error: > > [ 4085.271442] ip_set: exports duplicate symbol ip_set_nfnl_put (owned > by kernel) > > What should I do? Do you by any chance have ipset enabled in kernel config or ipset separatedly installed with "modules" use-flag? > > Rgds, ^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: Problems with xtables-addons 1.3.7 on Gentoo 2011-08-05 13:41 ` nowhere @ 2011-08-05 13:49 ` Pandu Poluan 2011-08-05 15:09 ` Jan Engelhardt 0 siblings, 1 reply; 10+ messages in thread From: Pandu Poluan @ 2011-08-05 13:49 UTC (permalink / raw) To: nowhere; +Cc: netfilter On Fri, Aug 5, 2011 at 20:41, nowhere <nowhere@hakkenden.ath.cx> wrote: > В Птн, 05/08/2011 в 20:19 +0700, Pandu Poluan пишет: >> I'm having troubles with xtables-addons 1.3.7 on Gentoo. >> >> I successfully installed xtables-addons (no errors), but all attempts >> to create an IP set (e.g., `ipset --create test hash:ip`) resulted in >> the following error message: >> >> FATAL: Error inserting ip_set >> (/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko): >> Invalid module format >> >> `insmod` begat an additional information: >> >> insmod: error inserting >> '/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko': >> -1 Invalid module format >> >> `dmesg | tail -1` gave a worrying error: >> >> [ 4085.271442] ip_set: exports duplicate symbol ip_set_nfnl_put (owned >> by kernel) >> >> What should I do? > > Do you by any chance have ipset enabled in kernel config or ipset > separatedly installed with "modules" use-flag? > Yes, I have ipset enabled in kernel, and no, I don't have ipset installed separately. A kind friend at gentoo-user led me to CONFIG_IP_SET Apparently xtables-addons hates IP_SET=y So, I rebuild the kernel with IP_SET=m , and all is well. Anyways, thank you for your attempt to help :-) Rgds, -- Pandu E Poluan ~ IT Optimizer ~ • Blog : http://pepoluan.tumblr.com • Linked-In : http://id.linkedin.com/in/pepoluan ^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: Problems with xtables-addons 1.3.7 on Gentoo 2011-08-05 13:49 ` Pandu Poluan @ 2011-08-05 15:09 ` Jan Engelhardt 2011-08-05 15:44 ` Pandu Poluan 0 siblings, 1 reply; 10+ messages in thread From: Jan Engelhardt @ 2011-08-05 15:09 UTC (permalink / raw) To: Pandu Poluan; +Cc: nowhere, netfilter On Friday 2011-08-05 15:49, Pandu Poluan wrote: >On Fri, Aug 5, 2011 at 20:41, nowhere <nowhere@hakkenden.ath.cx> wrote: >> В Птн, 05/08/2011 в 20:19 +0700, Pandu Poluan пишет: >>> I'm having troubles with xtables-addons 1.3.7 on Gentoo. >>> >>> I successfully installed xtables-addons (no errors), but all attempts >>> to create an IP set (e.g., `ipset --create test hash:ip`) resulted in >>> the following error message: >>> >>> FATAL: Error inserting ip_set >>> (/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko): >>> Invalid module format >>> >>> `insmod` begat an additional information: >>> >>> insmod: error inserting >>> '/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko': >>> -1 Invalid module format >>> >>> `dmesg | tail -1` gave a worrying error: >>> >>> [ 4085.271442] ip_set: exports duplicate symbol ip_set_nfnl_put (owned >>> by kernel) >>> >>> What should I do? >> >> Do you by any chance have ipset enabled in kernel config or ipset >> separatedly installed with "modules" use-flag? >> > >Yes, I have ipset enabled in kernel, and no, I don't have ipset >installed separately. > >A kind friend at gentoo-user led me to CONFIG_IP_SET > >Apparently xtables-addons hates IP_SET=y > >So, I rebuild the kernel with IP_SET=m , and all is well. There is no reason to enable ipset in both the kernel and in xt-a. ^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: Problems with xtables-addons 1.3.7 on Gentoo 2011-08-05 15:09 ` Jan Engelhardt @ 2011-08-05 15:44 ` Pandu Poluan 2011-08-05 16:35 ` Jan Engelhardt 0 siblings, 1 reply; 10+ messages in thread From: Pandu Poluan @ 2011-08-05 15:44 UTC (permalink / raw) To: Jan Engelhardt, nowhere, netfilter (Please forgive my top-posting) So, I should set IP_SET=n ? Doesn't the ipset(8) command require support from the kernel? I'm rather confused... Rgds, On 2011-08-05, Jan Engelhardt <jengelh@medozas.de> wrote: > On Friday 2011-08-05 15:49, Pandu Poluan wrote: > >>On Fri, Aug 5, 2011 at 20:41, nowhere <nowhere@hakkenden.ath.cx> wrote: >>> В Птн, 05/08/2011 в 20:19 +0700, Pandu Poluan пишет: >>>> I'm having troubles with xtables-addons 1.3.7 on Gentoo. >>>> >>>> I successfully installed xtables-addons (no errors), but all attempts >>>> to create an IP set (e.g., `ipset --create test hash:ip`) resulted in >>>> the following error message: >>>> >>>> FATAL: Error inserting ip_set >>>> (/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko): >>>> Invalid module format >>>> >>>> `insmod` begat an additional information: >>>> >>>> insmod: error inserting >>>> '/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko': >>>> -1 Invalid module format >>>> >>>> `dmesg | tail -1` gave a worrying error: >>>> >>>> [ 4085.271442] ip_set: exports duplicate symbol ip_set_nfnl_put (owned >>>> by kernel) >>>> >>>> What should I do? >>> >>> Do you by any chance have ipset enabled in kernel config or ipset >>> separatedly installed with "modules" use-flag? >>> >> >>Yes, I have ipset enabled in kernel, and no, I don't have ipset >>installed separately. >> >>A kind friend at gentoo-user led me to CONFIG_IP_SET >> >>Apparently xtables-addons hates IP_SET=y >> >>So, I rebuild the kernel with IP_SET=m , and all is well. > > There is no reason to enable ipset in both the kernel and in xt-a. > -- -- Pandu E Poluan - IT Optimizer My website: http://pandu.poluan.info/ ^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: Problems with xtables-addons 1.3.7 on Gentoo 2011-08-05 15:44 ` Pandu Poluan @ 2011-08-05 16:35 ` Jan Engelhardt 2011-08-05 17:05 ` Pandu Poluan 0 siblings, 1 reply; 10+ messages in thread From: Jan Engelhardt @ 2011-08-05 16:35 UTC (permalink / raw) To: Pandu Poluan; +Cc: nowhere, netfilter On Friday 2011-08-05 17:44, Pandu Poluan wrote: >(Please forgive my top-posting) > >So, I should set IP_SET=n ? > >Doesn't the ipset(8) command require support from the kernel? Did it occur to you that kernel modules can provide just that? ^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: Problems with xtables-addons 1.3.7 on Gentoo 2011-08-05 16:35 ` Jan Engelhardt @ 2011-08-05 17:05 ` Pandu Poluan 2011-08-05 17:12 ` Mr Dash Four 2011-08-05 18:17 ` Jan Engelhardt 0 siblings, 2 replies; 10+ messages in thread From: Pandu Poluan @ 2011-08-05 17:05 UTC (permalink / raw) To: Jan Engelhardt, nowhere, netfilter *red from embarrassment* Yes, of course. That begat a question though: Why the options in the kernel config, then? Rgds, On 2011-08-05, Jan Engelhardt <jengelh@medozas.de> wrote: > On Friday 2011-08-05 17:44, Pandu Poluan wrote: > >>(Please forgive my top-posting) >> >>So, I should set IP_SET=n ? >> >>Doesn't the ipset(8) command require support from the kernel? > > Did it occur to you that kernel modules can provide just that? > -- -- Pandu E Poluan - IT Optimizer My website: http://pandu.poluan.info/ ^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: Problems with xtables-addons 1.3.7 on Gentoo 2011-08-05 17:05 ` Pandu Poluan @ 2011-08-05 17:12 ` Mr Dash Four 2011-08-05 17:13 ` Pandu Poluan 2011-08-05 18:17 ` Jan Engelhardt 1 sibling, 1 reply; 10+ messages in thread From: Mr Dash Four @ 2011-08-05 17:12 UTC (permalink / raw) To: Pandu Poluan; +Cc: Jan Engelhardt, nowhere, netfilter > That begat a question though: Why the options in the kernel config, then? > For people like myself, who do not use xtables, but use ipset (kernel modules) as part of the kernel build and then build/install ipset (the executable) separately. ^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: Problems with xtables-addons 1.3.7 on Gentoo 2011-08-05 17:12 ` Mr Dash Four @ 2011-08-05 17:13 ` Pandu Poluan 0 siblings, 0 replies; 10+ messages in thread From: Pandu Poluan @ 2011-08-05 17:13 UTC (permalink / raw) To: Mr Dash Four, Jan Engelhardt, nowhere, netfilter Ah, I see. Thanks for the explanation :) Rgds, On 2011-08-06, Mr Dash Four <mr.dash.four@googlemail.com> wrote: > >> That begat a question though: Why the options in the kernel config, then? >> > For people like myself, who do not use xtables, but use ipset (kernel > modules) as part of the kernel build and then build/install ipset (the > executable) separately. > > -- > To unsubscribe from this list: send the line "unsubscribe netfilter" in > the body of a message to majordomo@vger.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html > -- -- Pandu E Poluan - IT Optimizer My website: http://pandu.poluan.info/ ^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: Problems with xtables-addons 1.3.7 on Gentoo 2011-08-05 17:05 ` Pandu Poluan 2011-08-05 17:12 ` Mr Dash Four @ 2011-08-05 18:17 ` Jan Engelhardt 1 sibling, 0 replies; 10+ messages in thread From: Jan Engelhardt @ 2011-08-05 18:17 UTC (permalink / raw) To: Pandu Poluan; +Cc: nowhere, netfilter On Friday 2011-08-05 19:05, Pandu Poluan wrote: >*red from embarrassment* > >Yes, of course. > >That begat a question though: Why the options in the kernel config, then? Because ipset (the kernel components) have been merged thereto? ^ permalink raw reply [flat|nested] 10+ messages in thread
end of thread, other threads:[~2011-08-05 18:17 UTC | newest] Thread overview: 10+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2011-08-05 13:19 Problems with xtables-addons 1.3.7 on Gentoo Pandu Poluan 2011-08-05 13:41 ` nowhere 2011-08-05 13:49 ` Pandu Poluan 2011-08-05 15:09 ` Jan Engelhardt 2011-08-05 15:44 ` Pandu Poluan 2011-08-05 16:35 ` Jan Engelhardt 2011-08-05 17:05 ` Pandu Poluan 2011-08-05 17:12 ` Mr Dash Four 2011-08-05 17:13 ` Pandu Poluan 2011-08-05 18:17 ` Jan Engelhardt
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.