Bug 30769

Summary:	сломано ipset/iptables
Product:	Branch p7	Reporter:	Gleb Kulikov <glebus>
Component:	kernel-image-std-def	Assignee:	Andrey Cherepanov <cas>
Status:	CLOSED FIXED	QA Contact:	qa-p7 <qa-p7>
Severity:	blocker
Priority:	P3	CC:	aspsk, asy, boris, evg, glebfm, imz, ldv, mike, mithraen, rider, sbolshakov, shrek, sin, stalker, taf, vitty, vsu, zerg
Version:	не указана
Hardware:	x86_64
OS:	Linux
Bug Depends on:	30723
Bug Blocks:

Description

Gleb Kulikov 2015-02-23 23:33:49 MSK

сломан модуль xt_set, не работает -m set --match-set в iptables:

# iptables -A INPUT -m set --match-set DROPPERS src -m multiport -p tcp --dport .....

Kernel module xt_set is not loaded in.

[  693.113939] xt_set: Unknown symbol ip_set_add (err 0)
[  693.113990] xt_set: Unknown symbol ip_set_test (err 0)
[  693.114036] xt_set: Unknown symbol ip_set_del (err 0)
[  693.114068] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.114111] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.117057] xt_set: Unknown symbol ip_set_add (err 0)
[  693.117108] xt_set: Unknown symbol ip_set_test (err 0)
[  693.117154] xt_set: Unknown symbol ip_set_del (err 0)
[  693.117185] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.117231] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.119639] xt_set: Unknown symbol ip_set_add (err 0)
[  693.119723] xt_set: Unknown symbol ip_set_test (err 0)
[  693.119771] xt_set: Unknown symbol ip_set_del (err 0)
[  693.119811] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.119856] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.121841] xt_set: Unknown symbol ip_set_add (err 0)
[  693.121897] xt_set: Unknown symbol ip_set_test (err 0)
[  693.121936] xt_set: Unknown symbol ip_set_del (err 0)
[  693.121963] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.122003] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.123970] xt_set: Unknown symbol ip_set_add (err 0)
[  693.124053] xt_set: Unknown symbol ip_set_test (err 0)
[  693.124095] xt_set: Unknown symbol ip_set_del (err 0)
[  693.124123] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.124162] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.126438] xt_set: Unknown symbol ip_set_add (err 0)
[  693.126514] xt_set: Unknown symbol ip_set_test (err 0)
[  693.126562] xt_set: Unknown symbol ip_set_del (err 0)
[  693.126601] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.126645] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.133164] xt_set: Unknown symbol ip_set_add (err 0)
[  693.133243] xt_set: Unknown symbol ip_set_test (err 0)
[  693.133292] xt_set: Unknown symbol ip_set_del (err 0)
[  693.133334] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.133380] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.135823] xt_set: Unknown symbol ip_set_add (err 0)
[  693.135888] xt_set: Unknown symbol ip_set_test (err 0)
[  693.135926] xt_set: Unknown symbol ip_set_del (err 0)
[  693.135954] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.135995] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.137943] xt_set: Unknown symbol ip_set_add (err 0)
[  693.138017] xt_set: Unknown symbol ip_set_test (err 0)
[  693.138057] xt_set: Unknown symbol ip_set_del (err 0)
[  693.138084] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.138126] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.140518] xt_set: Unknown symbol ip_set_add (err 0)
[  693.140574] xt_set: Unknown symbol ip_set_test (err 0)
[  693.140624] xt_set: Unknown symbol ip_set_del (err 0)
[  693.140689] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.140733] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.143810] xt_set: Unknown symbol ip_set_add (err 0)
[  693.143859] xt_set: Unknown symbol ip_set_test (err 0)
[  693.143903] xt_set: Unknown symbol ip_set_del (err 0)
[  693.143934] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.143976] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.146167] xt_set: Unknown symbol ip_set_add (err 0)
[  693.146214] xt_set: Unknown symbol ip_set_test (err 0)
[  693.146252] xt_set: Unknown symbol ip_set_del (err 0)
[  693.146278] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.146311] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.157486] xt_set: Unknown symbol ip_set_add (err 0)
[  693.157537] xt_set: Unknown symbol ip_set_test (err 0)
[  693.157583] xt_set: Unknown symbol ip_set_del (err 0)
[  693.157640] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.157684] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.160680] xt_set: Unknown symbol ip_set_add (err 0)
[  693.160731] xt_set: Unknown symbol ip_set_test (err 0)
[  693.160775] xt_set: Unknown symbol ip_set_del (err 0)
[  693.160808] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.160853] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.163263] xt_set: Unknown symbol ip_set_add (err 0)
[  693.163343] xt_set: Unknown symbol ip_set_test (err 0)
[  693.163391] xt_set: Unknown symbol ip_set_del (err 0)
[  693.163428] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.163472] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.165525] xt_set: Unknown symbol ip_set_add (err 0)
[  693.165586] xt_set: Unknown symbol ip_set_test (err 0)
[  693.165624] xt_set: Unknown symbol ip_set_del (err 0)
[  693.165650] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.165685] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.167661] xt_set: Unknown symbol ip_set_add (err 0)
[  693.167718] xt_set: Unknown symbol ip_set_test (err 0)
[  693.167756] xt_set: Unknown symbol ip_set_del (err 0)
[  693.167782] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.167823] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.170076] xt_set: Unknown symbol ip_set_add (err 0)
[  693.170126] xt_set: Unknown symbol ip_set_test (err 0)
[  693.170171] xt_set: Unknown symbol ip_set_del (err 0)
[  693.170202] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.170243] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.176092] xt_set: Unknown symbol ip_set_add (err 0)
[  693.176138] xt_set: Unknown symbol ip_set_test (err 0)
[  693.176176] xt_set: Unknown symbol ip_set_del (err 0)
[  693.176201] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.176235] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.178161] xt_set: Unknown symbol ip_set_add (err 0)
[  693.178203] xt_set: Unknown symbol ip_set_test (err 0)
[  693.178239] xt_set: Unknown symbol ip_set_del (err 0)
[  693.178264] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.178299] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.180450] xt_set: Unknown symbol ip_set_add (err 0)
[  693.180498] xt_set: Unknown symbol ip_set_test (err 0)
[  693.180535] xt_set: Unknown symbol ip_set_del (err 0)
[  693.180560] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.180634] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.184704] xt_set: Unknown symbol ip_set_add (err 0)
[  693.184764] xt_set: Unknown symbol ip_set_test (err 0)
[  693.184804] xt_set: Unknown symbol ip_set_del (err 0)
[  693.184835] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.184875] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.187245] xt_set: Unknown symbol ip_set_add (err 0)
[  693.187335] xt_set: Unknown symbol ip_set_test (err 0)
[  693.187381] xt_set: Unknown symbol ip_set_del (err 0)
[  693.187414] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.187449] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.189732] xt_set: Unknown symbol ip_set_add (err 0)
[  693.189814] xt_set: Unknown symbol ip_set_test (err 0)
[  693.189864] xt_set: Unknown symbol ip_set_del (err 0)
[  693.189904] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.189949] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.200702] xt_set: Unknown symbol ip_set_add (err 0)
[  693.200773] xt_set: Unknown symbol ip_set_test (err 0)
[  693.200813] xt_set: Unknown symbol ip_set_del (err 0)
[  693.200840] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.200874] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.202666] xt_set: Unknown symbol ip_set_add (err 0)
[  693.202721] xt_set: Unknown symbol ip_set_test (err 0)
[  693.202759] xt_set: Unknown symbol ip_set_del (err 0)
[  693.202786] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.202820] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.205451] xt_set: Unknown symbol ip_set_add (err 0)
[  693.205509] xt_set: Unknown symbol ip_set_test (err 0)
[  693.205549] xt_set: Unknown symbol ip_set_del (err 0)
[  693.205577] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.205611] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.207584] xt_set: Unknown symbol ip_set_add (err 0)
[  693.207651] xt_set: Unknown symbol ip_set_test (err 0)
[  693.207688] xt_set: Unknown symbol ip_set_del (err 0)
[  693.207715] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.207751] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.210868] xt_set: Unknown symbol ip_set_add (err 0)
[  693.210918] xt_set: Unknown symbol ip_set_test (err 0)
[  693.210963] xt_set: Unknown symbol ip_set_del (err 0)
[  693.210996] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.211038] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.213339] xt_set: Unknown symbol ip_set_add (err 0)
[  693.213389] xt_set: Unknown symbol ip_set_test (err 0)
[  693.213433] xt_set: Unknown symbol ip_set_del (err 0)
[  693.213464] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.213506] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.220171] xt_set: Unknown symbol ip_set_add (err 0)
[  693.220223] xt_set: Unknown symbol ip_set_test (err 0)
[  693.220269] xt_set: Unknown symbol ip_set_del (err 0)
[  693.220300] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.220343] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.222687] xt_set: Unknown symbol ip_set_add (err 0)
[  693.222741] xt_set: Unknown symbol ip_set_test (err 0)
[  693.222787] xt_set: Unknown symbol ip_set_del (err 0)
[  693.222818] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.222860] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.225112] xt_set: Unknown symbol ip_set_add (err 0)
[  693.225178] xt_set: Unknown symbol ip_set_test (err 0)
[  693.225250] xt_set: Unknown symbol ip_set_del (err 0)
[  693.225277] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.225311] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.227708] xt_set: Unknown symbol ip_set_add (err 0)
[  693.227773] xt_set: Unknown symbol ip_set_test (err 0)
[  693.227813] xt_set: Unknown symbol ip_set_del (err 0)
[  693.227842] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.227877] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.230021] xt_set: Unknown symbol ip_set_add (err 0)
[  693.230083] xt_set: Unknown symbol ip_set_test (err 0)
[  693.230127] xt_set: Unknown symbol ip_set_del (err 0)
[  693.230154] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.230190] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  693.231966] xt_set: Unknown symbol ip_set_add (err 0)
[  693.232038] xt_set: Unknown symbol ip_set_test (err 0)
[  693.232076] xt_set: Unknown symbol ip_set_del (err 0)
[  693.232103] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  693.232141] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  717.226873] xt_set: Unknown symbol ip_set_add (err 0)
[  717.226913] xt_set: Unknown symbol ip_set_test (err 0)
[  717.226949] xt_set: Unknown symbol ip_set_del (err 0)
[  717.226974] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  717.227008] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  717.231438] xt_set: Unknown symbol ip_set_add (err 0)
[  717.231590] xt_set: Unknown symbol ip_set_test (err 0)
[  717.231721] xt_set: Unknown symbol ip_set_del (err 0)
[  717.231816] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  717.231936] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  717.234872] xt_set: Unknown symbol ip_set_add (err 0)
[  717.234932] xt_set: Unknown symbol ip_set_test (err 0)
[  717.234987] xt_set: Unknown symbol ip_set_del (err 0)
[  717.235026] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  717.235119] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  717.239831] xt_set: Unknown symbol ip_set_add (err 0)
[  717.239978] xt_set: Unknown symbol ip_set_test (err 0)
[  717.240099] xt_set: Unknown symbol ip_set_del (err 0)
[  717.240187] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  717.240327] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  717.242806] xt_set: Unknown symbol ip_set_add (err 0)
[  717.242852] xt_set: Unknown symbol ip_set_test (err 0)
[  717.242889] xt_set: Unknown symbol ip_set_del (err 0)
[  717.242915] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  717.242949] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  717.245484] xt_set: Unknown symbol ip_set_add (err 0)
[  717.245554] xt_set: Unknown symbol ip_set_test (err 0)
[  717.245611] xt_set: Unknown symbol ip_set_del (err 0)
[  717.245651] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  717.245704] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
[  734.334210] xt_set: Unknown symbol ip_set_add (err 0)
[  734.334271] xt_set: Unknown symbol ip_set_test (err 0)
[  734.334325] xt_set: Unknown symbol ip_set_del (err 0)
[  734.334364] xt_set: Unknown symbol ip_set_nfnl_put (err 0)
[  734.334424] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)

Comment 1

Alexei Takaseev 2015-02-24 08:10:56 MSK

Попробуйте убрать в сторону
/lib/modules/3.14.33-std-def-alt1/kernel/net/netfilter/xt_set.ko
потом depmod -a и снова загрузить модуль.

Comment 2

Alexei Takaseev 2015-02-24 08:16:28 MSK

Проблема в том, что
/lib/modules/3.14.33-std-def-alt1/kernel/net/netfilter/xt_set.ko
и /lib/modules/3.14.33-std-def-alt1/ipset/* собраны из разных версий ipset

Похоже, что в 3.14.33-alt1 остатки ядерного ядерного ipset вычищены не до конца.

Comment 3

Sergey Y. Afonin 2016-11-21 14:34:07 MSK

В std-def 4.x это работает. Если в p7 это ещё актуально, то надо там вешать.

Comment 4

Anton Farygin 2016-11-21 14:40:13 MSK

Перевешиваю на p7

Comment 5

Sergey Y. Afonin 2016-11-22 12:25:32 MSK

В p7 сейчас:

3.14.79-std-def-alt0.M70P.2
ipset v6.24

ipset работает.