Re: Unknown error.

Re: Unknown error.

[Justin Schoeman]

OK - That one did it!  Got a meaningful error message, and realised that 
somehow I had not built the CONNMARK module ;-) .

Now, the next error, when I try to load a geoip match:

/usr/local/sbin/iptables -t mangle -A INPUT -m geoip --dst-cc ZA -j ACCEPT

I get:

iptables: Invalid argument

with the following in dmesg:

ip_tables: geoip match: invalid size 0 != 96

It seems like some critical piece of geoip /xt_tables integration is not 
in place... Is my analysis correct?  If so, is there a porting document 
somewhere covering the iptables updates since geoip last worked?

Thanks,

Justin

Bob Boucneau wrote:
> Hi Justin,
> 
> Should be fixed in current Netfilter.  This was a bug.
> 
> http://lists.netfilter.org/pipermail/netfilter-buglog/2006-April/000921.html
> 
> B
> 
> -----Original Message-----
> From: netfilter-bounces@lists.netfilter.org
> [mailto:netfilter-bounces@lists.netfilter.org]On Behalf Of Justin Schoeman
> Sent: Thursday, August 10, 2006 11:35 AM
> To: netfilter@lists.netfilter.org
> Subject: Unknown error.
> 
> Hi again.
> 
> I was wondering if anybody could help me.  I am using kernel 2.6.17.8
> with iptables 1.3.5, and I get the following error:
> 
> iptables: Unknown error 4294967295
> 
> for this command:
> 
> /usr/local/sbin/iptables -A INPUT -j CONNMARK --save-mark
> 
> I see a large number of hits for the error message on google, mainly
> related to iptables 1.3.5, but I have not seen one thread with a
> conclusive solution.
> 
> Could anybody please give me some pointers on where to start looking? Is
> this an iptables bug, if so, what is the last good version.  If not,
> what else can I look for?
> 
> Thanks,
> 
> Justin
> 

RE: Unknown error.

[Daniel Williams]

The bug is an error message mapping. 

So in other words the command is failing for a legitimate reason,
iptables is just not giving you the useful error message. Try 1.3.4 and
see what the error message is, I don't believe you will find much
different.

Daniel 

-----Original Message-----
From: netfilter-bounces@lists.netfilter.org
[mailto:netfilter-bounces@lists.netfilter.org] On Behalf Of Justin
Schoeman
Sent: Friday, 11 August 2006 1:35 AM
To: netfilter@lists.netfilter.org
Subject: Unknown error.

Hi again.

I was wondering if anybody could help me.  I am using kernel 2.6.17.8 
with iptables 1.3.5, and I get the following error:

iptables: Unknown error 4294967295

for this command:

/usr/local/sbin/iptables -A INPUT -j CONNMARK --save-mark

I see a large number of hits for the error message on google, mainly 
related to iptables 1.3.5, but I have not seen one thread with a 
conclusive solution.

Could anybody please give me some pointers on where to start looking? Is

this an iptables bug, if so, what is the last good version.  If not, 
what else can I look for?

Thanks,

Justin

Unknown error.

[Justin Schoeman]

Hi again.

I was wondering if anybody could help me.  I am using kernel 2.6.17.8 
with iptables 1.3.5, and I get the following error:

iptables: Unknown error 4294967295

for this command:

/usr/local/sbin/iptables -A INPUT -j CONNMARK --save-mark

I see a large number of hits for the error message on google, mainly 
related to iptables 1.3.5, but I have not seen one thread with a 
conclusive solution.

Could anybody please give me some pointers on where to start looking? Is 
this an iptables bug, if so, what is the last good version.  If not, 
what else can I look for?

Thanks,

Justin

Re: Unknown error.

[Ming-Ching Tiew]

I don't think you can perform CONNMARK on the INPUT chain
of the filter table, try doing it on the mangle table :-

/usr/local/sbin/iptables -t mangle -A INPUT -j CONNMARK --save-mark

Cheers.
----- Original Message ----- 
From: "Justin Schoeman" <justin@expertron.co.za>
To: <netfilter@lists.netfilter.org>
Sent: Friday, August 11, 2006 1:34 AM
Subject: Unknown error.


> Hi again.
> 
> I was wondering if anybody could help me.  I am using kernel 2.6.17.8 
> with iptables 1.3.5, and I get the following error:
> 
> iptables: Unknown error 4294967295
> 
> for this command:
> 
> /usr/local/sbin/iptables -A INPUT -j CONNMARK --save-mark
> 
> I see a large number of hits for the error message on google, mainly 
> related to iptables 1.3.5, but I have not seen one thread with a 
> conclusive solution.
> 
> Could anybody please give me some pointers on where to start looking? Is 
> this an iptables bug, if so, what is the last good version.  If not, 
> what else can I look for?
> 
> Thanks,
> 
> Justin
> 

Re: Unknown error.

[Ming-Ching Tiew]

Cheers.
From: "Ming-Ching Tiew" <mingching.tiew@redtone.com>


> 
> I don't think you can perform CONNMARK on the INPUT chain
> of the filter table, try doing it on the mangle table :-
> 
> /usr/local/sbin/iptables -t mangle -A INPUT -j CONNMARK --save-mark
> 

Hmm I issue the commands on the filter table and INPUT chain on my system,
it seems to work too. And therefore your error is likely due to iptables not 
compiled against the correct kernel source.

unknown error

[Angel Tsankov]

Has anyone ever encountered error 4294967295 while using iptables?!