lkml.org 
[lkml]   [2009]   [Mar]   [25]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: netfilter spurious ELOOP
    David Miller wrote:
    > From: Francis Dupont <Francis.Dupont@fdupont.fr>
    > Date: Wed, 25 Mar 2009 00:02:05 +0100
    >
    > Adding correct CC:'s
    >
    >> summary: iptables command gets spurious ELOOP errors
    >>
    >> report: when a rule with a target like MARK --set-mark 0x80000001
    >> then adding new other rules can failed with "Too many levels of symbolic
    >> links" (aka ELOOP) error.
    >> The problem is in kernel net/ipv4/netfilter/ip_tables.c in the
    >> mark_source_chains() routine which checks the verdict field of
    >> targets even for not standard targets.
    >>
    >> keywords: netfilter target eloop
    >>
    >> environment: recent gentoo and fedora. Problem not fixed in
    >> linux-2.6.29 (last stable version taken from kernel.org some minutes ago).

    Just to clarify: does the problem happens when you have the MARK rule
    above in a user-defined chain that has more then one jump leading to
    it or does it also happen in other cases?


    \
     
     \ /
      Last update: 2009-03-25 18:13    [W:0.025 / U:0.344 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site