netdev - ip6tables filter breakage.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20140806195222.GA10618@redhat.com>
Date:	Wed, 6 Aug 2014 15:52:22 -0400
From:	Dave Jones <davej@...hat.com>
To:	netdev@...r.kernel.org
Subject: ip6tables filter breakage.

After updating to Linus' current tree with todays net/ merge,
I noticed that ip6tables doesn't work any more..

# ip6tables -F
ip6tables v1.4.19.1: can't initialize ip6tables table `filter': No
chain/target/match by that name
Perhaps ip6tables or your kernel needs to be upgraded

My config has CONFIG_IP6_NF_FILTER=m
I also note that ip6table_filter.ko doesn't get auto-loaded now.
But even after modprobing it, I get the same message.

Is there some additional option I now need to enable ?

I was a little surprised by how CONFIG_NF_TABLES is mandatory
for iptables to keep working, even if you don't have nft userspace.
(The only relevant thing in the Kconfig was related to x_tables,
 which I wasn't using).

Perhaps either some select's, or additional help text ?

	Dave

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html