netdev - Re: iproute2 action/policer question

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20090617064541.GA9819@ff.dom.local>
Date:	Wed, 17 Jun 2009 06:45:41 +0000
From:	Jarek Poplawski <jarkao2@...il.com>
To:	jamal <hadi@...erus.ca>
Cc:	Paweł Staszewski <pstaszewski@...are.pl>,
	Linux Network Development list <netdev@...r.kernel.org>,
	Andreas Henriksson <andreas@...al.se>
Subject: Re: iproute2 action/policer question

On Wed, Jun 17, 2009 at 06:28:46AM +0000, Jarek Poplawski wrote:
> On Wed, Jun 17, 2009 at 06:14:58AM +0000, Jarek Poplawski wrote:
> > On Tue, Jun 16, 2009 at 08:04:32AM -0400, jamal wrote:
> > > On Mon, 2009-06-15 at 16:52 +0200, Jarek Poplawski wrote:
> > > 
> > > > I've tried debian squeeze (testing) with: iptables v1.4.3.2, iproute2
> > > > -ss090324, and action ipt -j MARK doesn't work. AFAIK debian lenny
> > > > (stable) uses 1.4.2. I've also tried debian rescue probably based on
> > > > lenny (with iptables 1.4.2), and it seemed it didn't work yet (I'll
> > > > re-check this). When you have something new I'd be glad for Cc.
> > > 
> > > I am suprised it broke again. 
> > > Lets CC the debian iproute maintainer. 
> > 
> > I confirm I can't get 'action ipt -j MARK' working on debian lenny
> > (stable) with distro's iptables/tc. I'm not able to compile tc from
> > vanilla sources properly either - configure fails 3 IPT tests. (I
> > admit I can miss setting some (undocumented?) config variables.) So,
> > with or without debian, IMHO iproute2 needs some updates for iptables
> > 1.4.2, 1.4.3, and maybe even 1.4.4 now.
> 
> OOPS! I _can_ configure it for 1.4.2 yet (so it's only about >= 1.4.3).

Btw., so 'action -j MARK' can work with iptables 1.4.2 & updated
iproute2, but I confirm Pawel's report that 'action -j LOG' doesn't
work yet.

Jarek P.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html