Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932237AbVL0Fpi (ORCPT ); Tue, 27 Dec 2005 00:45:38 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S932238AbVL0Fph (ORCPT ); Tue, 27 Dec 2005 00:45:37 -0500 Received: from relay01.mail-hub.dodo.com.au ([203.220.32.149]:65003 "EHLO relay01.mail-hub.dodo.com.au") by vger.kernel.org with ESMTP id S932237AbVL0Fph (ORCPT ); Tue, 27 Dec 2005 00:45:37 -0500 From: Grant Coady To: Patrick McHardy Cc: gcoady@gmail.com, Greg KH , linux-kernel@vger.kernel.org, stable@kernel.org, torvalds@osdl.org, Netfilter Development Mailinglist Subject: Re: Linux 2.6.14.5 Date: Tue, 27 Dec 2005 16:45:54 +1100 Organization: http://bugsplatter.mine.nu/ Reply-To: gcoady@gmail.com Message-ID: References: <20051227005327.GA21786@kroah.com> <32b1r156pu7much2m94ajva2bmcs4mpcag@4ax.com> <43B0C788.3010803@trash.net> In-Reply-To: <43B0C788.3010803@trash.net> X-Mailer: Forte Agent 2.0/32.652 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 2107 Lines: 40 On Tue, 27 Dec 2005 05:48:08 +0100, Patrick McHardy wrote: >Grant Coady wrote: >> netfilter is broken compared to 2.6.15-rc7 (first 2.6 kernel tested >> on this box) or 2.4.32 :( Same ruleset as used for months. >> >> Fails to recognise named chains with a useless error message: >> >> "iptables: No chain/target/match by that name" > >Please give an example of a failing command. + iptables -A INPUT -p all --match state --state ESTABLISHED,RELATED -j ACCEPT iptables: No chain/target/match by that name + iptables -A INPUT -p tcp --match state --state NEW --dport ftp --match limit --limit 3/min -j ACCEPT iptables: No chain/target/match by that name + iptables -A INPUT -p tcp --match state --state NEW --dport ftp -j DROP iptables: No chain/target/match by that name + iptables -A INPUT -p tcp --match state --state NEW --dport http --match limit --limit 12/min -j ACCEPT iptables: No chain/target/match by that name + iptables -A INPUT -p tcp --match state --state NEW --dport http -j DROP iptables: No chain/target/match by that name FORWARD + iptables -A FORWARD -p all --match state --state ESTABLISHED,RELATED -j ACCEPT iptables: No chain/target/match by that name + iptables -A egress -p tcp --match state --state NEW --match multiport --dports ftp,http,pop3,nntp,pop3s -j ACCEPT iptables: No chain/target/match by that name + iptables -A egress -p tcp --match state --state NEW --match multiport --dports https,rsync -j ACCEPT iptables: No chain/target/match by that name + iptables -A egress -p all --match state --state NEW --match limit --limit 12/min -j ACCEPT iptables: No chain/target/match by that name See also: http://bugsplatter.mine.nu/bash/firewall/rc.firewall.gz http://bugsplatter.mine.nu/test/boxen/deltree/iptables-vnL-2.6.14.4-dt http://bugsplatter.mine.nu/test/boxen/deltree/iptables-vnL-2.6.14.5-dt Grant. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/