сломан модуль xt_set, не работает -m set --match-set в iptables: # iptables -A INPUT -m set --match-set DROPPERS src -m multiport -p tcp --dport ..... Kernel module xt_set is not loaded in. [ 693.113939] xt_set: Unknown symbol ip_set_add (err 0) [ 693.113990] xt_set: Unknown symbol ip_set_test (err 0) [ 693.114036] xt_set: Unknown symbol ip_set_del (err 0) [ 693.114068] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.114111] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.117057] xt_set: Unknown symbol ip_set_add (err 0) [ 693.117108] xt_set: Unknown symbol ip_set_test (err 0) [ 693.117154] xt_set: Unknown symbol ip_set_del (err 0) [ 693.117185] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.117231] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.119639] xt_set: Unknown symbol ip_set_add (err 0) [ 693.119723] xt_set: Unknown symbol ip_set_test (err 0) [ 693.119771] xt_set: Unknown symbol ip_set_del (err 0) [ 693.119811] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.119856] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.121841] xt_set: Unknown symbol ip_set_add (err 0) [ 693.121897] xt_set: Unknown symbol ip_set_test (err 0) [ 693.121936] xt_set: Unknown symbol ip_set_del (err 0) [ 693.121963] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.122003] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.123970] xt_set: Unknown symbol ip_set_add (err 0) [ 693.124053] xt_set: Unknown symbol ip_set_test (err 0) [ 693.124095] xt_set: Unknown symbol ip_set_del (err 0) [ 693.124123] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.124162] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.126438] xt_set: Unknown symbol ip_set_add (err 0) [ 693.126514] xt_set: Unknown symbol ip_set_test (err 0) [ 693.126562] xt_set: Unknown symbol ip_set_del (err 0) [ 693.126601] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.126645] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.133164] xt_set: Unknown symbol ip_set_add (err 0) [ 693.133243] xt_set: Unknown symbol ip_set_test (err 0) [ 693.133292] xt_set: Unknown symbol ip_set_del (err 0) [ 693.133334] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.133380] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.135823] xt_set: Unknown symbol ip_set_add (err 0) [ 693.135888] xt_set: Unknown symbol ip_set_test (err 0) [ 693.135926] xt_set: Unknown symbol ip_set_del (err 0) [ 693.135954] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.135995] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.137943] xt_set: Unknown symbol ip_set_add (err 0) [ 693.138017] xt_set: Unknown symbol ip_set_test (err 0) [ 693.138057] xt_set: Unknown symbol ip_set_del (err 0) [ 693.138084] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.138126] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.140518] xt_set: Unknown symbol ip_set_add (err 0) [ 693.140574] xt_set: Unknown symbol ip_set_test (err 0) [ 693.140624] xt_set: Unknown symbol ip_set_del (err 0) [ 693.140689] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.140733] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.143810] xt_set: Unknown symbol ip_set_add (err 0) [ 693.143859] xt_set: Unknown symbol ip_set_test (err 0) [ 693.143903] xt_set: Unknown symbol ip_set_del (err 0) [ 693.143934] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.143976] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.146167] xt_set: Unknown symbol ip_set_add (err 0) [ 693.146214] xt_set: Unknown symbol ip_set_test (err 0) [ 693.146252] xt_set: Unknown symbol ip_set_del (err 0) [ 693.146278] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.146311] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.157486] xt_set: Unknown symbol ip_set_add (err 0) [ 693.157537] xt_set: Unknown symbol ip_set_test (err 0) [ 693.157583] xt_set: Unknown symbol ip_set_del (err 0) [ 693.157640] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.157684] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.160680] xt_set: Unknown symbol ip_set_add (err 0) [ 693.160731] xt_set: Unknown symbol ip_set_test (err 0) [ 693.160775] xt_set: Unknown symbol ip_set_del (err 0) [ 693.160808] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.160853] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.163263] xt_set: Unknown symbol ip_set_add (err 0) [ 693.163343] xt_set: Unknown symbol ip_set_test (err 0) [ 693.163391] xt_set: Unknown symbol ip_set_del (err 0) [ 693.163428] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.163472] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.165525] xt_set: Unknown symbol ip_set_add (err 0) [ 693.165586] xt_set: Unknown symbol ip_set_test (err 0) [ 693.165624] xt_set: Unknown symbol ip_set_del (err 0) [ 693.165650] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.165685] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.167661] xt_set: Unknown symbol ip_set_add (err 0) [ 693.167718] xt_set: Unknown symbol ip_set_test (err 0) [ 693.167756] xt_set: Unknown symbol ip_set_del (err 0) [ 693.167782] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.167823] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.170076] xt_set: Unknown symbol ip_set_add (err 0) [ 693.170126] xt_set: Unknown symbol ip_set_test (err 0) [ 693.170171] xt_set: Unknown symbol ip_set_del (err 0) [ 693.170202] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.170243] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.176092] xt_set: Unknown symbol ip_set_add (err 0) [ 693.176138] xt_set: Unknown symbol ip_set_test (err 0) [ 693.176176] xt_set: Unknown symbol ip_set_del (err 0) [ 693.176201] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.176235] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.178161] xt_set: Unknown symbol ip_set_add (err 0) [ 693.178203] xt_set: Unknown symbol ip_set_test (err 0) [ 693.178239] xt_set: Unknown symbol ip_set_del (err 0) [ 693.178264] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.178299] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.180450] xt_set: Unknown symbol ip_set_add (err 0) [ 693.180498] xt_set: Unknown symbol ip_set_test (err 0) [ 693.180535] xt_set: Unknown symbol ip_set_del (err 0) [ 693.180560] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.180634] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.184704] xt_set: Unknown symbol ip_set_add (err 0) [ 693.184764] xt_set: Unknown symbol ip_set_test (err 0) [ 693.184804] xt_set: Unknown symbol ip_set_del (err 0) [ 693.184835] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.184875] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.187245] xt_set: Unknown symbol ip_set_add (err 0) [ 693.187335] xt_set: Unknown symbol ip_set_test (err 0) [ 693.187381] xt_set: Unknown symbol ip_set_del (err 0) [ 693.187414] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.187449] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.189732] xt_set: Unknown symbol ip_set_add (err 0) [ 693.189814] xt_set: Unknown symbol ip_set_test (err 0) [ 693.189864] xt_set: Unknown symbol ip_set_del (err 0) [ 693.189904] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.189949] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.200702] xt_set: Unknown symbol ip_set_add (err 0) [ 693.200773] xt_set: Unknown symbol ip_set_test (err 0) [ 693.200813] xt_set: Unknown symbol ip_set_del (err 0) [ 693.200840] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.200874] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.202666] xt_set: Unknown symbol ip_set_add (err 0) [ 693.202721] xt_set: Unknown symbol ip_set_test (err 0) [ 693.202759] xt_set: Unknown symbol ip_set_del (err 0) [ 693.202786] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.202820] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.205451] xt_set: Unknown symbol ip_set_add (err 0) [ 693.205509] xt_set: Unknown symbol ip_set_test (err 0) [ 693.205549] xt_set: Unknown symbol ip_set_del (err 0) [ 693.205577] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.205611] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.207584] xt_set: Unknown symbol ip_set_add (err 0) [ 693.207651] xt_set: Unknown symbol ip_set_test (err 0) [ 693.207688] xt_set: Unknown symbol ip_set_del (err 0) [ 693.207715] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.207751] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.210868] xt_set: Unknown symbol ip_set_add (err 0) [ 693.210918] xt_set: Unknown symbol ip_set_test (err 0) [ 693.210963] xt_set: Unknown symbol ip_set_del (err 0) [ 693.210996] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.211038] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.213339] xt_set: Unknown symbol ip_set_add (err 0) [ 693.213389] xt_set: Unknown symbol ip_set_test (err 0) [ 693.213433] xt_set: Unknown symbol ip_set_del (err 0) [ 693.213464] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.213506] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.220171] xt_set: Unknown symbol ip_set_add (err 0) [ 693.220223] xt_set: Unknown symbol ip_set_test (err 0) [ 693.220269] xt_set: Unknown symbol ip_set_del (err 0) [ 693.220300] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.220343] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.222687] xt_set: Unknown symbol ip_set_add (err 0) [ 693.222741] xt_set: Unknown symbol ip_set_test (err 0) [ 693.222787] xt_set: Unknown symbol ip_set_del (err 0) [ 693.222818] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.222860] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.225112] xt_set: Unknown symbol ip_set_add (err 0) [ 693.225178] xt_set: Unknown symbol ip_set_test (err 0) [ 693.225250] xt_set: Unknown symbol ip_set_del (err 0) [ 693.225277] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.225311] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.227708] xt_set: Unknown symbol ip_set_add (err 0) [ 693.227773] xt_set: Unknown symbol ip_set_test (err 0) [ 693.227813] xt_set: Unknown symbol ip_set_del (err 0) [ 693.227842] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.227877] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.230021] xt_set: Unknown symbol ip_set_add (err 0) [ 693.230083] xt_set: Unknown symbol ip_set_test (err 0) [ 693.230127] xt_set: Unknown symbol ip_set_del (err 0) [ 693.230154] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.230190] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 693.231966] xt_set: Unknown symbol ip_set_add (err 0) [ 693.232038] xt_set: Unknown symbol ip_set_test (err 0) [ 693.232076] xt_set: Unknown symbol ip_set_del (err 0) [ 693.232103] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 693.232141] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 717.226873] xt_set: Unknown symbol ip_set_add (err 0) [ 717.226913] xt_set: Unknown symbol ip_set_test (err 0) [ 717.226949] xt_set: Unknown symbol ip_set_del (err 0) [ 717.226974] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 717.227008] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 717.231438] xt_set: Unknown symbol ip_set_add (err 0) [ 717.231590] xt_set: Unknown symbol ip_set_test (err 0) [ 717.231721] xt_set: Unknown symbol ip_set_del (err 0) [ 717.231816] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 717.231936] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 717.234872] xt_set: Unknown symbol ip_set_add (err 0) [ 717.234932] xt_set: Unknown symbol ip_set_test (err 0) [ 717.234987] xt_set: Unknown symbol ip_set_del (err 0) [ 717.235026] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 717.235119] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 717.239831] xt_set: Unknown symbol ip_set_add (err 0) [ 717.239978] xt_set: Unknown symbol ip_set_test (err 0) [ 717.240099] xt_set: Unknown symbol ip_set_del (err 0) [ 717.240187] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 717.240327] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 717.242806] xt_set: Unknown symbol ip_set_add (err 0) [ 717.242852] xt_set: Unknown symbol ip_set_test (err 0) [ 717.242889] xt_set: Unknown symbol ip_set_del (err 0) [ 717.242915] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 717.242949] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 717.245484] xt_set: Unknown symbol ip_set_add (err 0) [ 717.245554] xt_set: Unknown symbol ip_set_test (err 0) [ 717.245611] xt_set: Unknown symbol ip_set_del (err 0) [ 717.245651] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 717.245704] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0) [ 734.334210] xt_set: Unknown symbol ip_set_add (err 0) [ 734.334271] xt_set: Unknown symbol ip_set_test (err 0) [ 734.334325] xt_set: Unknown symbol ip_set_del (err 0) [ 734.334364] xt_set: Unknown symbol ip_set_nfnl_put (err 0) [ 734.334424] xt_set: Unknown symbol ip_set_nfnl_get_byindex (err 0)
Попробуйте убрать в сторону /lib/modules/3.14.33-std-def-alt1/kernel/net/netfilter/xt_set.ko потом depmod -a и снова загрузить модуль.
Проблема в том, что /lib/modules/3.14.33-std-def-alt1/kernel/net/netfilter/xt_set.ko и /lib/modules/3.14.33-std-def-alt1/ipset/* собраны из разных версий ipset Похоже, что в 3.14.33-alt1 остатки ядерного ядерного ipset вычищены не до конца.
В std-def 4.x это работает. Если в p7 это ещё актуально, то надо там вешать.
Перевешиваю на p7
В p7 сейчас: 3.14.79-std-def-alt0.M70P.2 ipset v6.24 ipset работает.