Bug#1051592: Regression: Commit "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" breaks ruleset loading in linux-stable

2023-09-12 Thread Pablo Neira Ayuso
On Tue, Sep 12, 2023 at 01:39:59PM +0200, Timo Sigurdsson wrote: > Hi Pablo, > > Pablo Neira Ayuso schrieb am 12.09.2023 00:57 (GMT +02:00): > > > Hi Timo, > > > > On Mon, Sep 11, 2023 at 11:37:50PM +0200, Timo Sigurdsson wrote: > >> Hi, > >> &

Bug#1051592: Regression: Commit "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID" breaks ruleset loading in linux-stable

2023-09-11 Thread Pablo Neira Ayuso
rules to the chain binding. I have cherry-picked these three patches for nftables v1.0.6 userspace and your ruleset restores fine. See patches enclosed to this email. >From 4e5b0a64227dde250f94bec45b3fb127d78b7fd2 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Mon, 6 Feb

Bug#690676: IPv6 kernel filtering still broken in conntrackd 1.4.3 with kernel 4.4

2016-04-07 Thread Pablo Neira Ayuso
On Wed, Mar 30, 2016 at 02:52:03PM +0200, Arturo Borrero Gonzalez wrote: > Hi, > > I can confirm that IPv6 kernel filtering is still broken in conntrackd > 1.4.3 with Linux kernel 4.4. > > The test is simple: > * configure a two node conntrackd cluster to sync connections > * configure IPv6

Bug#806130: linux: netlink_sock_destruct() crash in netns

2015-11-28 Thread Pablo Neira Ayuso
On Thu, Nov 26, 2015 at 10:14:58PM +, Ben Hutchings wrote: > On Tue, 2015-11-24 at 16:49 +0100, Arturo Borrero Gonzalez wrote: > > Source: linux > > Version: 4.2.6-1 > > Severity: normal > > > > Dear Maintainer, > > > > thanks for your work in the linux kernel. > > > > I'm experimenting

Bug#691856: upgrade to ulogd 2.0.1, 1.x series have entered EOL

2012-10-30 Thread Pablo Neira Ayuso
Package: ulogd Version: 1.24-3.2+b1 Hi! It would be great if you can upgrade to ulogd 2.0.1. The 1.x series have now entered EOL. Thank you! -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#612272: conntrack: ENOBUFS in event logging mode

2011-03-13 Thread Pablo Neira Ayuso
The problem is in Linux kernel 2.6.37. 2.6.37.3 still has this problem. You have to apply the following patch. I expect that it will be available in the upcoming 2.6.37.4. From cba85b532e4aabdb97f44c18987d45141fd93faa Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso pa...@netfilter.org Date

Bug#589157: libnetfilter_log: Please, upgrade to 1.0.0

2010-07-15 Thread Pablo Neira Ayuso
Package: libnetfilter-log1 Severity: wishlist Hi, libnetfilter-log 1.0.0 [1] has been released. Please, upgrade! Thanks, Pablo [1] http://www.netfilter.org/projects/libnetfilter_log/downloads.html#libnetfilter_log-1.0.0 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org

Bug#589201: libnetfilter_conntrack: Please, upgrade to 0.0.102

2010-07-15 Thread Pablo Neira Ayuso
Package: libnetfilter-conntrack3 Severity: wishlist Hi, libnetfilter-conntrack 0.0.102 [1] has been released. Please, upgrade! Thanks, Pablo [1] http://www.netfilter.org/projects/libnetfilter_conntrack/downloads.html#libnetfilter_conntrack-0.0.102 -- To UNSUBSCRIBE, email to

Bug#589202: conntrack: Please, upgrade to 0.9.15

2010-07-15 Thread Pablo Neira Ayuso
Package: conntrack Severity: wishlist Hi, conntrack-tools 0.9.15 [1] has been released. Please, upgrade! Thanks, Pablo [1] http://www.netfilter.org/projects/conntrack-tools/downloads.html#conntrack-tools-0.9.15 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a

Bug#589203: conntrack: Please, upgrade to 0.9.15

2010-07-15 Thread Pablo Neira Ayuso
Package: conntrack Severity: wishlist Hi, conntrack-tools 0.9.15 [1] has been released. Please, upgrade! Thanks, Pablo [1] http://www.netfilter.org/projects/conntrack-tools/downloads.html#conntrack-tools-0.9.15 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a

Bug#589204: conntrackd: Please, upgrade to 0.9.15

2010-07-15 Thread Pablo Neira Ayuso
Package: conntrackd Severity: wishlist Hi, conntrack-tools 0.9.15 [1] has been released. Please, upgrade! Thanks, Pablo [1] http://www.netfilter.org/projects/conntrack-tools/downloads.html#conntrack-tools-0.9.15 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a

Bug#588730: libnetfilter_queue: Please, upgrade to 1.0.0

2010-07-11 Thread Pablo Neira Ayuso
Package: libnetfilter-queue1 Severity: wishlist Hi, libnetfilter-queue 1.0.0 [1] has been released. Please, upgrade! Thanks, Pablo [1] http://www.netfilter.org/projects/libnetfilter_queue/downloads.html#libnetfilter_queue-1.0.0 -- To UNSUBSCRIBE, email to

Bug#537896: conntrack: Please update to newer version 0.9.13

2009-07-21 Thread Pablo Neira Ayuso
Package: conntrack Severity: wishlist Hi, Please, update conntrack to the latest version that is 0.9.13 [1]. [1] http://lwn.net/Articles/342303/ Thanks, Pablo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#449899: Replace conntrack package with conntrack-tools please

2008-03-05 Thread Pablo Neira Ayuso
Max Kellermann wrote: On 2008/03/03 18:27, Sz?p Csaba [EMAIL PROTECTED] wrote: The successor of conntrack is the conntrack-tools. http://people.netfilter.org/pablo/conntrack-tools/index.html Hi, I am currently waiting for the next conntrack-tools release (0.9.6), because it fixes a lot of