lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Wed, 17 Jun 2009 06:45:41 +0000 From: Jarek Poplawski <jarkao2@...il.com> To: jamal <hadi@...erus.ca> Cc: Paweł Staszewski <pstaszewski@...are.pl>, Linux Network Development list <netdev@...r.kernel.org>, Andreas Henriksson <andreas@...al.se> Subject: Re: iproute2 action/policer question On Wed, Jun 17, 2009 at 06:28:46AM +0000, Jarek Poplawski wrote: > On Wed, Jun 17, 2009 at 06:14:58AM +0000, Jarek Poplawski wrote: > > On Tue, Jun 16, 2009 at 08:04:32AM -0400, jamal wrote: > > > On Mon, 2009-06-15 at 16:52 +0200, Jarek Poplawski wrote: > > > > > > > I've tried debian squeeze (testing) with: iptables v1.4.3.2, iproute2 > > > > -ss090324, and action ipt -j MARK doesn't work. AFAIK debian lenny > > > > (stable) uses 1.4.2. I've also tried debian rescue probably based on > > > > lenny (with iptables 1.4.2), and it seemed it didn't work yet (I'll > > > > re-check this). When you have something new I'd be glad for Cc. > > > > > > I am suprised it broke again. > > > Lets CC the debian iproute maintainer. > > > > I confirm I can't get 'action ipt -j MARK' working on debian lenny > > (stable) with distro's iptables/tc. I'm not able to compile tc from > > vanilla sources properly either - configure fails 3 IPT tests. (I > > admit I can miss setting some (undocumented?) config variables.) So, > > with or without debian, IMHO iproute2 needs some updates for iptables > > 1.4.2, 1.4.3, and maybe even 1.4.4 now. > > OOPS! I _can_ configure it for 1.4.2 yet (so it's only about >= 1.4.3). Btw., so 'action -j MARK' can work with iptables 1.4.2 & updated iproute2, but I confirm Pawel's report that 'action -j LOG' doesn't work yet. Jarek P. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists