<?xml version="1.0" encoding="UTF-8" ?>

<bugzilla version="5.2"
          urlbase="https://bugzilla.altlinux.org/"
          
          maintainer="jenya@basealt.ru"
>

    <bug>
          <bug_id>30769</bug_id>
          
          <creation_ts>2015-02-23 23:33:49 +0300</creation_ts>
          <short_desc>сломано ipset/iptables</short_desc>
          <delta_ts>2016-11-22 12:25:45 +0300</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>3</classification_id>
          <classification>Distributions</classification>
          <product>Branch p7</product>
          <component>kernel-image-std-def</component>
          <version>не указана</version>
          <rep_platform>x86_64</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>CLOSED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P3</priority>
          <bug_severity>blocker</bug_severity>
          <target_milestone>---</target_milestone>
          <dependson>30723</dependson>
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Gleb Kulikov">glebus</reporter>
          <assigned_to name="Andrey Cherepanov">cas</assigned_to>
          <cc>aspsk</cc>
    
    <cc>asy</cc>
    
    <cc>boris</cc>
    
    <cc>evg</cc>
    
    <cc>glebfm</cc>
    
    <cc>imz</cc>
    
    <cc>ldv</cc>
    
    <cc>mike</cc>
    
    <cc>mithraen</cc>
    
    <cc>rider</cc>
    
    <cc>sbolshakov</cc>
    
    <cc>shrek</cc>
    
    <cc>sin</cc>
    
    <cc>stalker</cc>
    
    <cc>taf</cc>
    
    <cc>vitty</cc>
    
    <cc>vsu</cc>
    
    <cc>zerg</cc>
          
          <qa_contact name="qa-p7@altlinux.org">qa-p7</qa_contact>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>150428</commentid>
    <comment_count>0</comment_count>
    <who name="Gleb Kulikov">glebus</who>
    <bug_when>2015-02-23 23:33:49 +0300</bug_when>
    <thetext>сломан модуль xt_set, не работает -m set --match-set в iptables:

# iptables -A INPUT -m set --match-set DROPPERS src -m multiport -p tcp --dport .....

Kernel module xt_set is not loaded in.

[  693.113939] xt_set: Unknown symbol ip_set_add (err 0)
[  693.113990] xt_set: Unknown symbol ip_set_test (err 0)
[  693.114036] xt_set: Unknown symbol ip_set_del (err 0)
[  693.114068] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.114111] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.117057] xt_set: Unknown symbol ip_set_add (err 0)
[  693.117108] xt_set: Unknown symbol ip_set_test (err 0)
[  693.117154] xt_set: Unknown symbol ip_set_del (err 0)
[  693.117185] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.117231] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.119639] xt_set: Unknown symbol ip_set_add (err 0)
[  693.119723] xt_set: Unknown symbol ip_set_test (err 0)
[  693.119771] xt_set: Unknown symbol ip_set_del (err 0)
[  693.119811] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.119856] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.121841] xt_set: Unknown symbol ip_set_add (err 0)
[  693.121897] xt_set: Unknown symbol ip_set_test (err 0)
[  693.121936] xt_set: Unknown symbol ip_set_del (err 0)
[  693.121963] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.122003] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.123970] xt_set: Unknown symbol ip_set_add (err 0)
[  693.124053] xt_set: Unknown symbol ip_set_test (err 0)
[  693.124095] xt_set: Unknown symbol ip_set_del (err 0)
[  693.124123] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.124162] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.126438] xt_set: Unknown symbol ip_set_add (err 0)
[  693.126514] xt_set: Unknown symbol ip_set_test (err 0)
[  693.126562] xt_set: Unknown symbol ip_set_del (err 0)
[  693.126601] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.126645] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.133164] xt_set: Unknown symbol ip_set_add (err 0)
[  693.133243] xt_set: Unknown symbol ip_set_test (err 0)
[  693.133292] xt_set: Unknown symbol ip_set_del (err 0)
[  693.133334] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.133380] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.135823] xt_set: Unknown symbol ip_set_add (err 0)
[  693.135888] xt_set: Unknown symbol ip_set_test (err 0)
[  693.135926] xt_set: Unknown symbol ip_set_del (err 0)
[  693.135954] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.135995] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.137943] xt_set: Unknown symbol ip_set_add (err 0)
[  693.138017] xt_set: Unknown symbol ip_set_test (err 0)
[  693.138057] xt_set: Unknown symbol ip_set_del (err 0)
[  693.138084] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.138126] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.140518] xt_set: Unknown symbol ip_set_add (err 0)
[  693.140574] xt_set: Unknown symbol ip_set_test (err 0)
[  693.140624] xt_set: Unknown symbol ip_set_del (err 0)
[  693.140689] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.140733] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.143810] xt_set: Unknown symbol ip_set_add (err 0)
[  693.143859] xt_set: Unknown symbol ip_set_test (err 0)
[  693.143903] xt_set: Unknown symbol ip_set_del (err 0)
[  693.143934] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.143976] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.146167] xt_set: Unknown symbol ip_set_add (err 0)
[  693.146214] xt_set: Unknown symbol ip_set_test (err 0)
[  693.146252] xt_set: Unknown symbol ip_set_del (err 0)
[  693.146278] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.146311] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.157486] xt_set: Unknown symbol ip_set_add (err 0)
[  693.157537] xt_set: Unknown symbol ip_set_test (err 0)
[  693.157583] xt_set: Unknown symbol ip_set_del (err 0)
[  693.157640] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.157684] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.160680] xt_set: Unknown symbol ip_set_add (err 0)
[  693.160731] xt_set: Unknown symbol ip_set_test (err 0)
[  693.160775] xt_set: Unknown symbol ip_set_del (err 0)
[  693.160808] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.160853] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.163263] xt_set: Unknown symbol ip_set_add (err 0)
[  693.163343] xt_set: Unknown symbol ip_set_test (err 0)
[  693.163391] xt_set: Unknown symbol ip_set_del (err 0)
[  693.163428] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.163472] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.165525] xt_set: Unknown symbol ip_set_add (err 0)
[  693.165586] xt_set: Unknown symbol ip_set_test (err 0)
[  693.165624] xt_set: Unknown symbol ip_set_del (err 0)
[  693.165650] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.165685] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.167661] xt_set: Unknown symbol ip_set_add (err 0)
[  693.167718] xt_set: Unknown symbol ip_set_test (err 0)
[  693.167756] xt_set: Unknown symbol ip_set_del (err 0)
[  693.167782] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.167823] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.170076] xt_set: Unknown symbol ip_set_add (err 0)
[  693.170126] xt_set: Unknown symbol ip_set_test (err 0)
[  693.170171] xt_set: Unknown symbol ip_set_del (err 0)
[  693.170202] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.170243] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.176092] xt_set: Unknown symbol ip_set_add (err 0)
[  693.176138] xt_set: Unknown symbol ip_set_test (err 0)
[  693.176176] xt_set: Unknown symbol ip_set_del (err 0)
[  693.176201] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.176235] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.178161] xt_set: Unknown symbol ip_set_add (err 0)
[  693.178203] xt_set: Unknown symbol ip_set_test (err 0)
[  693.178239] xt_set: Unknown symbol ip_set_del (err 0)
[  693.178264] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.178299] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.180450] xt_set: Unknown symbol ip_set_add (err 0)
[  693.180498] xt_set: Unknown symbol ip_set_test (err 0)
[  693.180535] xt_set: Unknown symbol ip_set_del (err 0)
[  693.180560] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.180634] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.184704] xt_set: Unknown symbol ip_set_add (err 0)
[  693.184764] xt_set: Unknown symbol ip_set_test (err 0)
[  693.184804] xt_set: Unknown symbol ip_set_del (err 0)
[  693.184835] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.184875] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.187245] xt_set: Unknown symbol ip_set_add (err 0)
[  693.187335] xt_set: Unknown symbol ip_set_test (err 0)
[  693.187381] xt_set: Unknown symbol ip_set_del (err 0)
[  693.187414] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.187449] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.189732] xt_set: Unknown symbol ip_set_add (err 0)
[  693.189814] xt_set: Unknown symbol ip_set_test (err 0)
[  693.189864] xt_set: Unknown symbol ip_set_del (err 0)
[  693.189904] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.189949] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.200702] xt_set: Unknown symbol ip_set_add (err 0)
[  693.200773] xt_set: Unknown symbol ip_set_test (err 0)
[  693.200813] xt_set: Unknown symbol ip_set_del (err 0)
[  693.200840] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.200874] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.202666] xt_set: Unknown symbol ip_set_add (err 0)
[  693.202721] xt_set: Unknown symbol ip_set_test (err 0)
[  693.202759] xt_set: Unknown symbol ip_set_del (err 0)
[  693.202786] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.202820] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.205451] xt_set: Unknown symbol ip_set_add (err 0)
[  693.205509] xt_set: Unknown symbol ip_set_test (err 0)
[  693.205549] xt_set: Unknown symbol ip_set_del (err 0)
[  693.205577] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.205611] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.207584] xt_set: Unknown symbol ip_set_add (err 0)
[  693.207651] xt_set: Unknown symbol ip_set_test (err 0)
[  693.207688] xt_set: Unknown symbol ip_set_del (err 0)
[  693.207715] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.207751] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.210868] xt_set: Unknown symbol ip_set_add (err 0)
[  693.210918] xt_set: Unknown symbol ip_set_test (err 0)
[  693.210963] xt_set: Unknown symbol ip_set_del (err 0)
[  693.210996] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.211038] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.213339] xt_set: Unknown symbol ip_set_add (err 0)
[  693.213389] xt_set: Unknown symbol ip_set_test (err 0)
[  693.213433] xt_set: Unknown symbol ip_set_del (err 0)
[  693.213464] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.213506] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.220171] xt_set: Unknown symbol ip_set_add (err 0)
[  693.220223] xt_set: Unknown symbol ip_set_test (err 0)
[  693.220269] xt_set: Unknown symbol ip_set_del (err 0)
[  693.220300] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.220343] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.222687] xt_set: Unknown symbol ip_set_add (err 0)
[  693.222741] xt_set: Unknown symbol ip_set_test (err 0)
[  693.222787] xt_set: Unknown symbol ip_set_del (err 0)
[  693.222818] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.222860] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.225112] xt_set: Unknown symbol ip_set_add (err 0)
[  693.225178] xt_set: Unknown symbol ip_set_test (err 0)
[  693.225250] xt_set: Unknown symbol ip_set_del (err 0)
[  693.225277] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.225311] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.227708] xt_set: Unknown symbol ip_set_add (err 0)
[  693.227773] xt_set: Unknown symbol ip_set_test (err 0)
[  693.227813] xt_set: Unknown symbol ip_set_del (err 0)
[  693.227842] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.227877] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.230021] xt_set: Unknown symbol ip_set_add (err 0)
[  693.230083] xt_set: Unknown symbol ip_set_test (err 0)
[  693.230127] xt_set: Unknown symbol ip_set_del (err 0)
[  693.230154] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.230190] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.231966] xt_set: Unknown symbol ip_set_add (err 0)
[  693.232038] xt_set: Unknown symbol ip_set_test (err 0)
[  693.232076] xt_set: Unknown symbol ip_set_del (err 0)
[  693.232103] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.232141] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  717.226873] xt_set: Unknown symbol ip_set_add (err 0)
[  717.226913] xt_set: Unknown symbol ip_set_test (err 0)
[  717.226949] xt_set: Unknown symbol ip_set_del (err 0)
[  717.226974] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  717.227008] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  717.231438] xt_set: Unknown symbol ip_set_add (err 0)
[  717.231590] xt_set: Unknown symbol ip_set_test (err 0)
[  717.231721] xt_set: Unknown symbol ip_set_del (err 0)
[  717.231816] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  717.231936] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  717.234872] xt_set: Unknown symbol ip_set_add (err 0)
[  717.234932] xt_set: Unknown symbol ip_set_test (err 0)
[  717.234987] xt_set: Unknown symbol ip_set_del (err 0)
[  717.235026] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  717.235119] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  717.239831] xt_set: Unknown symbol ip_set_add (err 0)
[  717.239978] xt_set: Unknown symbol ip_set_test (err 0)
[  717.240099] xt_set: Unknown symbol ip_set_del (err 0)
[  717.240187] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  717.240327] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  717.242806] xt_set: Unknown symbol ip_set_add (err 0)
[  717.242852] xt_set: Unknown symbol ip_set_test (err 0)
[  717.242889] xt_set: Unknown symbol ip_set_del (err 0)
[  717.242915] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  717.242949] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  717.245484] xt_set: Unknown symbol ip_set_add (err 0)
[  717.245554] xt_set: Unknown symbol ip_set_test (err 0)
[  717.245611] xt_set: Unknown symbol ip_set_del (err 0)
[  717.245651] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  717.245704] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  734.334210] xt_set: Unknown symbol ip_set_add (err 0)
[  734.334271] xt_set: Unknown symbol ip_set_test (err 0)
[  734.334325] xt_set: Unknown symbol ip_set_del (err 0)
[  734.334364] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  734.334424] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>150434</commentid>
    <comment_count>1</comment_count>
    <who name="Alexei Takaseev">taf</who>
    <bug_when>2015-02-24 08:10:56 +0300</bug_when>
    <thetext>Попробуйте убрать в сторону
/lib/modules/3.14.33-std-def-alt1/kernel/net/netfilter/xt_set.ko
потом depmod -a и снова загрузить модуль.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>150435</commentid>
    <comment_count>2</comment_count>
    <who name="Alexei Takaseev">taf</who>
    <bug_when>2015-02-24 08:16:28 +0300</bug_when>
    <thetext>Проблема в том, что
/lib/modules/3.14.33-std-def-alt1/kernel/net/netfilter/xt_set.ko
и /lib/modules/3.14.33-std-def-alt1/ipset/* собраны из разных версий ipset

Похоже, что в 3.14.33-alt1 остатки ядерного ядерного ipset вычищены не до конца.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>160064</commentid>
    <comment_count>3</comment_count>
    <who name="Sergey Y. Afonin">asy</who>
    <bug_when>2016-11-21 14:34:07 +0300</bug_when>
    <thetext>В std-def 4.x это работает. Если в p7 это ещё актуально, то надо там вешать.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>160065</commentid>
    <comment_count>4</comment_count>
    <who name="Anton Farygin">rider</who>
    <bug_when>2016-11-21 14:40:13 +0300</bug_when>
    <thetext>Перевешиваю на p7</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>160107</commentid>
    <comment_count>5</comment_count>
    <who name="Sergey Y. Afonin">asy</who>
    <bug_when>2016-11-22 12:25:32 +0300</bug_when>
    <thetext>В p7 сейчас:

3.14.79-std-def-alt0.M70P.2
ipset v6.24

ipset работает.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>