On Sat, 12 Dec 2015 20:32:37 +0100 Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote: > There is some problem with the revision infrastructure. > > iptables is asking for a match revision that is not available in the > kernel. So the negotiation between userspace and kernel to use a given > version of this match is failing for some reason. > > Could you apply this patch and tell me what it shows when you run this > command and the one using -m state? > > BTW, any particularly on your setup that is worth mention? > > Thanks. Pablo, here's the result with your patch applied: compatible_match_revision name=conntrack revision=3 compatible_match_revision name=conntrack revision=3 compatible_match_revision name=conntrack revision=3 iptables: Protocol wrong type for socket. If you need more info, just ask. -- Linux 4.3.2: Blurry Fish Butt http://www.youtube.com/DanielFragaBR http://exchangewar.info Bitcoin: 12H6661yoLDUZaYPdah6urZS5WiXwTAUgL -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html