Salatiel Filho wrote:
On 12/4/07, Patrick McHardy <kaber@xxxxxxxxx> wrote:
Salatiel Filho wrote:
~# iptables -L
iptables v1.3.8: can't initialize iptables table `filter': Invalid argument
Perhaps iptables or your kernel needs to be upgraded.
# dmesg
ip_tables: (C) 2000-2002 Netfilter core team
translate_table: size 632
Finished chain 1
Finished chain 2
Finished chain 3
table->private->number = 4
get_entries: 668 != 672
This looks like an alignment problem. Old kernels required
alignof(struct ipt_entry), which should be 4. Userspace
compiled against current headers use:
struct _xt_align
{
u_int8_t u8;
u_int16_t u16;
u_int32_t u32;
u_int64_t u64;
};
#define XT_ALIGN(s) (((s) + (__alignof__(struct _xt_align)-1)) \
& ~(__alignof__(struct _xt_align)-1))
which I guess is 8 on ARM. Does removing the u_int64_t
from the struct above in the iptables source
(include/linux/netfilter/x_tables.h) help?
I can not find include/linux/netfilter/x_tables.h in iptables source.
# ls -1 include/linux/netfilter/
nf_conntrack_common.h
nf_conntrack_tuple_common.h
nf_conntrack_tuple.h
nf_nat.h
Right, we only recently added it. Are you compiling against your
kernel source? Otherwise check in /usr/include/linux/...
-
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
