Re: [ANNOUNCE] ipset 6.28 released

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 5 Mar 2018, Akshat Kakkar wrote:

> > What is your architecture?
> Its a 4.4.82 64 bit kernel

What I meant is your hardware architecture, i.e. "uname -a". But I suppose 
it's x86_64.

> and my setup has only 2 machines ... one laptop(IP:192.168.100.100)
> and other this linux machine (IP:192.168.100.1).
> 
> I have already taken sufficient time of yours, you just plz reply that 
> are you able to find an iptable rule hit with ipset having entry 
> 0.0.0.0/0,eth0. If you are able to, then I will try doing a fresh 
> installation of everything. However, cause of issue will remain unknown.

Yes, in my test environment the rule is matched. But it'd be really 
strange and definitely not normal that a reinstall is required...

root@a# ipset v
ipset v6.35, protocol version: 6
root@a# ipset l
Name: test
Type: hash:net,iface
Revision: 6
Header: family inet hashsize 1024 maxelem 65536
Size in memory: 536
References: 0
Number of entries: 1
Members:
0.0.0.0/0,eth0
root@a# iptables-save -t filter -c
# Generated by iptables-save v1.4.21 on Mon Mar  5 20:07:28 2018
*filter                                                                        
:INPUT ACCEPT [0:0]                                      
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
[0:0] -A INPUT -m set --match-set test src,src -j ACCEPT                   
COMMIT                                                                         
# Completed on Mon Mar  5 20:02:50 2018            

"ping -c 1 a"

root@a# iptables-save -t filter -c
# Generated by iptables-save v1.4.21 on Mon Mar  5 20:07:32 2018
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1:84]
[1:84] -A INPUT -m set --match-set test src,src -j ACCEPT
COMMIT
# Completed on Mon Mar  5 20:07:32 2018

Best regards,
Jozsef
-
E-mail  : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
          H-1525 Budapest 114, POB. 49, Hungary
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux