Bug#401719: netfilter: libipt_multiport: getsockopt failed strangely invalid argument

[Arnaud Fontaine <arnaud@andesi.org>]

Package: linux-2.6
Version: 2.6.18-6
Severity: important
Tags: patch

Hello,

When I  try to use the '-m  multiport' argument of iptables,  I have the
following error message:

# /sbin/iptables -A INPUT -p tcp -m multiport --sports \
                 ssh,www,imap2,pop3,domain,https,smtp,auth -m state \
                  --state NEW,ESTABLISHED,RELATED -j ACCEPT
getsockopt failed strangely: Invalid argument

According to Patrick McHardy[0], this  error appears because "the 32 bit
compat code  doesn't implement the  SO_GET_REVISION_MATCH/TARGET options
and returned an error" in kernel  version > 2.6.16 and < 2.6.19, a patch
is  available[1]. I built  the kernel  image using  this patch  and this
error doesn't appear anymore.

Regards,
Arnaud Fontaine 

[0] https://lists.netfilter.org/pipermail/netfilter-devel/2006-December/026262.html
[1] https://lists.netfilter.org/pipermail/netfilter-devel/2006-December/026266.html

-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable')
Architecture: sparc (sparc64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-3-sparc64-smp
Locale: LANG=fr_FR@euro, LC_CTYPE=fr_FR@euro (charmap=ISO-8859-15)