[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#783958: marked as done (linux-image-3.16.0-4-amd64: iptables fails to work with jessie's kernel)



Your message dated Fri, 01 May 2015 23:47:10 +0100
with message-id <1430520430.4113.9.camel@decadent.org.uk>
and subject line Re: Bug#783958: linux-image-3.16.0-4-amd64: iptables fails to work with jessie's kernel
has caused the Debian Bug report #783958,
regarding linux-image-3.16.0-4-amd64: iptables fails to work with jessie's kernel
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
783958: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783958
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: linux-image-3.16.0-4-amd64
Version: 3.16.7-ckt9-3~deb8u1
Severity: important

A simple test with iptables against Jessie's default kernel fails to work, but using a custom kernel not from repositories and iptables works. A simple test is done allowing one match rule, and it can immediately be seen there is a problem with either iptables or Jessie's default kernel of 3.16.0-4-amd64.

eg,
iptables -I INPUT -p tcp --dport 22 -j ACCEPT
iptables -P INPUT DROP

traffic to port 22 later works if I apply iptables -P INPUT ACCEPT
Using a non-stock kernel, the above example works exactly as expected. Since iptables can work with another kernel then I suppose there is something wrong with linux-image-3.16.0-4-amd64 preventing iptables from working.

please have a look
thanks

--- End Message ---
--- Begin Message ---
On Fri, 2015-05-01 at 15:40 -0400, westlake wrote:
> please close this bugreport (discovered this bug should be handled 
> better by another source -- openvswitch)

Thanks for confirming.

Ben.

-- 
Ben Hutchings
It is easier to write an incorrect program than to understand a correct one.

Attachment: signature.asc
Description: This is a digitally signed message part


--- End Message ---

Reply to: