Bug#282195: marked as done (kernel-image-2.6.9-1-686: ip_tables seem to be broken)
Your message dated Sat, 5 Feb 2005 18:20:22 +0100
with message-id <20050205172022.GA31767@sputnik.stro.at>
and subject line Bug#282195: ip_tables seem to be broken
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 20 Nov 2004 12:06:22 +0000
>From mnencia@prato.linux.it Sat Nov 20 04:06:22 2004
Return-path: <mnencia@prato.linux.it>
Received: from host84-82.pool80183.interbusiness.it (poison.ath.cx) [80.183.82.84]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1CVU0T-0002r7-00; Sat, 20 Nov 2004 04:06:21 -0800
Received: by poison.ath.cx (Postfix, from userid 1000)
id EDD8C41D9; Sat, 20 Nov 2004 13:06:17 +0100 (CET)
Content-Type: multipart/mixed; boundary="===============0871626017=="
MIME-Version: 1.0
From: Marco Nenciarini <mnencia@prato.linux.it>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: kernel-image-2.6.9-1-686: ip_tables seem to be broken
X-Mailer: reportbug 3.2
Date: Sat, 20 Nov 2004 13:06:17 +0100
Message-Id: <20041120120617.EDD8C41D9@poison.ath.cx>
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level:
This is a multi-part MIME message sent by reportbug.
--===============0871626017==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Package: kernel-image-2.6.9-1-686
Version: 2.6.9-2
Severity: critical
Justification: breaks unrelated software
On my system (used as router for my local lan) ipmasq don't work anymore
after i've installed latest kernel. If I start with 2.6.8 kernel all work ok.
This is the output of ipmasq command:
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `nat': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `nat': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `nat': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `nat': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `nat': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `nat': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `nat': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `nat': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `nat': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
iptables v1.2.11: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
/sbin/ipfwadm: invalid protocol "1" specified
Try `/sbin/ipfwadm -h' for more information.
/sbin/ipfwadm: invalid protocol "17" specified
Try `/sbin/ipfwadm -h' for more information.
/sbin/ipfwadm: invalid protocol "1" specified
Try `/sbin/ipfwadm -h' for more information.
/sbin/ipfwadm: invalid protocol "17" specified
Try `/sbin/ipfwadm -h' for more information.
This is the output of "modprobe iptable_nat" command:
WARNING: Error inserting ip_tables (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_tables.ko): Device or resource busy
ip_conntrack version 2.1 (1535 buckets, 12280 max) - 332 bytes per conntrack
Unable to register netfilter socket option
WARNING: Error inserting ip_conntrack (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/ip_conntrack.ko): Device or resource busy
iptable_nat: Unknown symbol ip_ct_protos
iptable_nat: Unknown symbol ip_ct_selective_cleanup
iptable_nat: Unknown symbol ipt_do_table
iptable_nat: Unknown symbol invert_tuplepr
iptable_nat: Unknown symbol ip_ct_gather_frags
iptable_nat: Unknown symbol ip_conntrack_untracked
iptable_nat: Unknown symbol ipt_unregister_table
iptable_nat: Unknown symbol ip_conntrack_htable_size
iptable_nat: Unknown symbol ipt_unregister_target
iptable_nat: Unknown symbol ip_conntrack_destroyed
iptable_nat: Unknown symbol need_ip_conntrack
iptable_nat: Unknown symbol ip_conntrack_tuple_taken
iptable_nat: Unknown symbol ipt_register_target
iptable_nat: Unknown symbol ip_conntrack_alter_reply
iptable_nat: Unknown symbol ipt_register_table
FATAL: Error inserting iptable_nat (/lib/modules/2.6.9-1-686/kernel/net/ipv4/netfilter/iptable_nat.ko): Unknown symbol in module, or unknown parameter (see dmesg)
I've attached my dmesg output.
Tnx
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9-1-686
Locale: LANG=it_IT.UTF-8@euro, LC_CTYPE=it_IT.UTF-8@euro (charmap=UTF-8)
Versions of packages kernel-image-2.6.9-1-686 depends on:
ii coreutils [fileutils] 5.2.1-2 The GNU core utilities
ii initrd-tools 0.1.74 tools to create initrd image for p
ii module-init-tools 3.1-pre6-1 tools for managing Linux kernel mo
-- no debconf information
--===============0871626017==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="dmesg.out"
IRQ 11
Simple Boot Flag at 0x34 set to 0x1
VFS: Disk quotas dquot_6.5.1
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
Initializing Cryptographic API
Limiting direct PCI/PCI transfers.
isapnp: Scanning for PnP cards...
isapnp: No Plug & Play device found
serio: i8042 AUX port at 0x60,0x64 irq 12
serio: i8042 KBD port at 0x60,0x64 irq 1
Serial: 8250/16550 driver $Revision: 1.90 $ 48 ports, IRQ sharing enabled
ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
RAMDISK driver initialized: 16 RAM disks of 8192K size 1024 blocksize
input: AT Translated Set 2 keyboard on isa0060/serio0
NET: Registered protocol family 2
IP: routing cache hash table of 1024 buckets, 8Kbytes
TCP: Hash tables configured (established 16384 bind 32768)
NET: Registered protocol family 8
NET: Registered protocol family 20
ACPI: (supports S0 S1 S4 S4bios S5)
ACPI wakeup devices:
USB0
RAMDISK: cramfs filesystem found at block 0
RAMDISK: Loading 4572KiB [1 disk] into ram disk... |/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/done.
VFS: Mounted root (cramfs filesystem) readonly.
Mounted devfs on /dev
Mounted devfs on /dev
Freeing unused kernel memory: 152k freed
vesafb: probe of vesafb0 failed with error -6
NET: Registered protocol family 1
Uniform Multi-Platform E-IDE driver Revision: 7.00alpha2
ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx
PIIX4: IDE controller at PCI slot 0000:00:07.1
PIIX4: chipset revision 1
PIIX4: not 100% native mode: will probe irqs later
ide0: BM-DMA at 0xf000-0xf007, BIOS settings: hda:DMA, hdb:DMA
ide1: BM-DMA at 0xf008-0xf00f, BIOS settings: hdc:DMA, hdd:DMA
Probing IDE interface ide0...
hda: FUJITSU MPD3043AT, ATA DISK drive
hdb: CRD-8482B, ATAPI CD/DVD-ROM drive
hdb: Disabling (U)DMA for CRD-8482B (blacklisted)
Using anticipatory io scheduler
ide0 at 0x1f0-0x1f7,0x3f6 on irq 14
hda: max request size: 128KiB
hda: 8448300 sectors (4325 MB) w/512KiB Cache, CHS=8940/15/63, UDMA(33)
hda: cache flushes not supported
/dev/ide/host0/bus0/target0/lun0: p1 p2
Probing IDE interface ide1...
hdc: WDC WD600BB-00CAA0, ATA DISK drive
ide1 at 0x170-0x177,0x376 on irq 15
hdc: max request size: 128KiB
hdc: 117231408 sectors (60022 MB) w/2048KiB Cache, CHS=65535/16/63, UDMA(33)
hdc: cache flushes not supported
/dev/ide/host0/bus1/target0/lun0: p1
Probing IDE interface ide2...
ide2: Wait for ready failed before probe !
Probing IDE interface ide3...
ide3: Wait for ready failed before probe !
Probing IDE interface ide4...
ide4: Wait for ready failed before probe !
Probing IDE interface ide5...
ide5: Wait for ready failed before probe !
ReiserFS: hda1: found reiserfs format "3.6" with standard journal
ReiserFS: hda1: using ordered data mode
ReiserFS: hda1: journal params: device hda1, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30
ReiserFS: hda1: checking transaction log (hda1)
ReiserFS: hda1: Using r5 hash to sort names
Adding 248996k swap on /dev/hda2. Priority:-1 extents:1
Real Time Clock Driver v1.12
ACPI: PCI interrupt 0000:01:00.0[A] -> GSI 11 (level, low) -> IRQ 11
matroxfb: Matrox MGA-G200 (AGP) detected
matroxfb: MTRR's turned on
matroxfb: 800x600x32bpp (virtual: 800x2621)
matroxfb: framebuffer at 0xE8000000, mapped to 0xcca00000, size 8388608
Console: switching to colour frame buffer device 100x37
fb0: MATROX frame buffer device
mice: PS/2 mouse device common for all mice
Capability LSM initialized
ReiserFS: hdc1: found reiserfs format "3.6" with standard journal
ReiserFS: hdc1: using ordered data mode
ReiserFS: hdc1: journal params: device hdc1, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30
ReiserFS: hdc1: checking transaction log (hdc1)
ReiserFS: hdc1: Using r5 hash to sort names
input: PC Speaker
input: PS/2 Generic Mouse on isa0060/serio1
ts: Compaq touchscreen protocol output
inserting floppy driver for 2.6.9-1-686
Floppy drive(s): fd0 is 1.44M
FDC 0 is a post-1991 82077
parport: PnPBIOS parport detected.
parport0: PC-style at 0x378 (0x778), irq 7, dma 3 [PCSPP,TRISTATE,COMPAT,EPP,ECP,DMA]
Linux agpgart interface v0.100 (c) Dave Jones
agpgart: Detected an Intel 440BX Chipset.
agpgart: Maximum main memory to use for agp memory: 149M
agpgart: AGP aperture is 64M @ 0xe0000000
cpci_hotplug: CompactPCI Hot Plug Core version: 0.2
pci_hotplug: PCI Hot Plug PCI Core version: 0.5
shpchp: acpi_shpchprm:\_SB_.PCI0 evaluate _BBN fail=0x5
shpchp: acpi_shpchprm:get_device PCI ROOT HID fail=0x5
pciehp: acpi_pciehprm:\_SB_.PCI0 evaluate _BBN fail=0x5
pciehp: acpi_pciehprm:get_device PCI ROOT HID fail=0x5
usbcore: registered new driver usbfs
usbcore: registered new driver hub
USB Universal Host Controller Interface driver v2.2
ACPI: PCI interrupt 0000:00:07.2[D] -> GSI 10 (level, low) -> IRQ 10
uhci_hcd 0000:00:07.2: Intel Corp. 82371AB/EB/MB PIIX4 USB
uhci_hcd 0000:00:07.2: irq 10, io base 0000e000
uhci_hcd 0000:00:07.2: new USB bus registered, assigned bus number 1
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
via-rhine.c:v1.10-LK1.2.0-2.6 June-10-2004 Written by Donald Becker
ACPI: PCI interrupt 0000:00:0d.0[A] -> GSI 5 (level, low) -> IRQ 5
eth0: VIA Rhine II at 0xe400, 00:50:ba:6b:84:85, IRQ 5.
eth0: MII PHY found at address 8, status 0x7829 advertising 01e1 Link 45e1.
eth0: link up, 100Mbps, full-duplex, lpa 0x45E1
ip_conntrack version 2.1 (1535 buckets, 12280 max) - 332 bytes per conntrack
ip_conntrack version 2.1 (1535 buckets, 12280 max) - 332 bytes per conntrack
Unable to register netfilter socket option
iptable_nat: Unknown symbol ip_ct_protos
iptable_nat: Unknown symbol ip_ct_selective_cleanup
iptable_nat: Unknown symbol ipt_do_table
iptable_nat: Unknown symbol invert_tuplepr
iptable_nat: Unknown symbol ip_ct_gather_frags
iptable_nat: Unknown symbol ip_conntrack_untracked
iptable_nat: Unknown symbol ipt_unregister_table
iptable_nat: Unknown symbol ip_conntrack_htable_size
iptable_nat: Unknown symbol ipt_unregister_target
iptable_nat: Unknown symbol ip_conntrack_destroyed
iptable_nat: Unknown symbol need_ip_conntrack
iptable_nat: Unknown symbol ip_conntrack_tuple_taken
iptable_nat: Unknown symbol ipt_register_target
iptable_nat: Unknown symbol ip_conntrack_alter_reply
iptable_nat: Unknown symbol ipt_register_table
CSLIP: code copyright 1989 Regents of the University of California
PPP generic driver version 2.4.2
NET: Registered protocol family 10
Disabled Privacy Extensions on device c0322340(lo)
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
eth0: no IPv6 routers present
PPP BSD Compression module registered
PPP Deflate Compression module registered
Sorry: masquerading timeouts set 5DAYS/2MINS/60SECS
--===============0871626017==--
---------------------------------------
Received: (at 282195-done) by bugs.debian.org; 5 Feb 2005 17:20:28 +0000
>From max@stro.at Sat Feb 05 09:20:28 2005
Return-path: <max@stro.at>
Received: from baikonur.stro.at [213.239.196.228]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1CxTbf-0001sz-00; Sat, 05 Feb 2005 09:20:27 -0800
Received: from sputnik (stallburg.stro.at [128.131.216.190])
by baikonur.stro.at (Postfix) with ESMTP id 144085C001;
Sat, 5 Feb 2005 18:21:00 +0100 (CET)
Received: from max by sputnik with local (Exim 4.34)
id 1CxTba-0000E3-Ue; Sat, 05 Feb 2005 18:20:23 +0100
Date: Sat, 5 Feb 2005 18:20:22 +0100
From: maximilian attems <debian@sternwelten.at>
To: 282195-done@bugs.debian.org
Cc: Adam Majer <adamm@galacticasoftware.com>
Subject: Re: Bug#282195: ip_tables seem to be broken
Message-ID: <20050205172022.GA31767@sputnik.stro.at>
References: <20050105171633.GA5946@galacticasoftware.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20050105171633.GA5946@galacticasoftware.com>
User-Agent: Mutt/1.5.6+20040907i
X-Virus-Scanned: by Amavis (ClamAV) at stro.at
Delivered-To: 282195-done@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
On Wed, 05 Jan 2005, Adam Majer wrote:
> tag 282195 + upstream
> tag 282195 + fixed-upstream
> thanks
>
> This bug appears to have been fixed upstream. 2.6.10
> changelog has,
>
> <okir@suse.de>
> [NETFILTER]: Don't export common symbols from ipfwadm.ko
>
> Exported kernel symbols ip_conntrack_count and ip_conntrack_tcp_update were
> showing up both in ip_conntrack.ko and ipfwadm.ko, causing bogus dependencies
> in modules.dep.
>
> Signed-off-by: Olaf Kirch <okir@suse.de>
> Signed-off-by: Patrick McHardy <kaber@trash.net>
> Signed-off-by: David S. Miller <davem@davemloft.net>
indeed thanks Adam for pointing to relevant changelog!
bug is no longer reproducible with kernel-image-2.6.10
please upgrade to it, as 2.6.9 should anyway be kicked
out of archive soon, if it hasn't been yet.
thanks for your bug report.
--
maks
Reply to: