[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Stretch => Buster: iptables



Le vendredi 16 octobre 2020 à 14:12:55+0200, Jesper Dybdal a écrit :
> 
> On 2020-10-16 12:35, Reco wrote:
> > Barring some kernel bugs - yes.
> > For instance, I've seen kernel panics because of simple:
> > 
> > iptables -A INPUT -m conntrack --ctstate INVALID -j DROP
> 
> Aargh!   I had not realized that I would have to be prepared for kernel
> panics during the upgrade, so I really appreciate that warning.  I'll have a
> bootable rescue disk ready.
> 
> Thanks a lot for not only this, but also your responses to my other
> questions.

Don't worry too much on that KP part, it's true there were some
instabilities at first, but not in the stable release.

For what it's worth, there are also scripts helping to transition to
nftables for good.

Cheers,

-- 
Pierre-Elliott Bécue
GPG: 9AE0 4D98 6400 E3B6 7528  F493 0D44 2664 1949 74E2
It's far easier to fight for one's principles than to live up to them.

Attachment: signature.asc
Description: PGP signature


Reply to: