[lkml]   [2009]   [Mar]   [25]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: netfilter spurious ELOOP
    David Miller wrote:
    > From: Francis Dupont <>
    > Date: Wed, 25 Mar 2009 00:02:05 +0100
    > Adding correct CC:'s
    >> summary: iptables command gets spurious ELOOP errors
    >> report: when a rule with a target like MARK --set-mark 0x80000001
    >> then adding new other rules can failed with "Too many levels of symbolic
    >> links" (aka ELOOP) error.
    >> The problem is in kernel net/ipv4/netfilter/ip_tables.c in the
    >> mark_source_chains() routine which checks the verdict field of
    >> targets even for not standard targets.
    >> keywords: netfilter target eloop
    >> environment: recent gentoo and fedora. Problem not fixed in
    >> linux-2.6.29 (last stable version taken from some minutes ago).

    Just to clarify: does the problem happens when you have the MARK rule
    above in a user-defined chain that has more then one jump leading to
    it or does it also happen in other cases?

     \ /
      Last update: 2009-03-25 18:13    [W:0.021 / U:15.468 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site