Bug#829269: ufw: fails with ERROR: initcaps, dmesg: ip6_tables: disagrees about version of symbol xt_compat_match_from_user in a fresh install

[Jonas Meurer]

On Wed, 27 Jul 2016 19:24:20 -0400 Brian Walsh  wrote:
> I was seeing this same error message. Running modprobe ip6_tables would
> generate the message.
> 
> ip6_tables: disagrees about version of symbol xt_compat_match_from_user
> 
> I had done an apt-get upgrade a while back and it looks like I had not
> rebooted since that upgrade. I verified this by comparing the uptime to
> the apt history of when linux-image was last installed. So I was running
> a different kernel that did not match the modules on the filesystem.
> 
> I rebooted and everything was fine.
> 
> I would say this is not a bug.

I can confirm that this is due to not rebooting after a kernel upgrade.
So not a bug in my eyes. Should be closed.

Cheers,
 jonas




signature.asc
Description: OpenPGP digital signature

Bug#829269: ufw: fails with ERROR: initcaps, dmesg: ip6_tables: disagrees about version of symbol xt_compat_match_from_user in a fresh install

[Brian Walsh]

I was seeing this same error message. Running modprobe ip6_tables would
generate the message.

ip6_tables: disagrees about version of symbol xt_compat_match_from_user

I had done an apt-get upgrade a while back and it looks like I had not
rebooted since that upgrade. I verified this by comparing the uptime to
the apt history of when linux-image was last installed. So I was running
a different kernel that did not match the modules on the filesystem.

I rebooted and everything was fine.

I would say this is not a bug.

Brian

Bug#829269: ufw: fails with ERROR: initcaps, dmesg: ip6_tables: disagrees about version of symbol xt_compat_match_from_user in a fresh install

[Jamie Strandboge]

retitle 829269 dmesg: ip6_tables: disagrees about version of symbol
xt_compat_match_from_user in a fresh install
reassign 829269 iptables
thanks

I can't reproduce this on testing either but based on the report it seems this
would be better reported against iptables since that is the package that is what
ufw uses under the hood for manipulating the firewall.

Are you able to give ip6tables commands that trigger this issue?

signature.asc
Description: This is a digitally signed message part

Bug#829269: ufw: fails with ERROR: initcaps, dmesg: ip6_tables: disagrees about version of symbol xt_compat_match_from_user in a fresh install

[Paul Wise]

Control: tags -1 + unreproducible moreinfo
Control: severity -1 important

On Fri, 01 Jul 2016 20:43:35 + PulM wrote:

> when enable ufw:
> ERROR: initcaps
> [Errno 2] modprobe: ERROR: could not insert 'ip6_tables': Unknown symbol in 
> module, or unknown parameter (see dmesg)

I'm unable to reproduce this issue on Debian jessie 8.5.
I suggest you try reinstalling your Linux kernel packages.
When I enable ufw I get this:

# ufw enable
Firewall is active and enabled on system startup
# dmesg | tail -n3
[   54.235243] ip_tables: (C) 2000-2006 Netfilter Core Team
[   54.265397] nf_conntrack version 0.5.0 (8003 buckets, 32012 max)
[   54.358377] ip6_tables: (C) 2000-2006 Netfilter Core Team

-- 
bye,
pabs

https://wiki.debian.org/PaulWise


signature.asc
Description: This is a digitally signed message part

Bug#829269: ufw: fails with ERROR: initcaps, dmesg: ip6_tables: disagrees about version of symbol xt_compat_match_from_user in a fresh install

[PulM]

Source: ufw
Version: 0.33-2
Severity: grave
Tags: ipv6
Justification: renders package unusable

when enable ufw:
ERROR: initcaps
[Errno 2] modprobe: ERROR: could not insert 'ip6_tables': Unknown symbol in 
module, or unknown parameter (see dmesg)
ip6tables v1.4.21: can't initialize ip6tables table `filter': Table does not 
exist (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.

dmesg output:
ip6_tables: disagrees about version of symbol xt_compat_match_from_user
ip6_tables: Unknown symbol xt_compat_match_from_user (err -22)
ip6_tables: Unknown symbol xt_compat_check_entry_offsets (err 0)
ip6_tables: Unknown symbol xt_check_entry_offsets (err 0)
ip6_tables: Unknown symbol xt_copy_counters_from_user (err 0)
ip6_tables: disagrees about version of symbol xt_compat_match_from_user
ip6_tables: Unknown symbol xt_compat_match_from_user (err -22)
ip6_tables: Unknown symbol xt_compat_check_entry_offsets (err 0)
ip6_tables: Unknown symbol xt_check_entry_offsets (err 0)
ip6_tables: Unknown symbol xt_copy_counters_from_user (err 0)
ip6_tables: disagrees about version of symbol xt_compat_match_from_user
ip6_tables: Unknown symbol xt_compat_match_from_user (err -22)
ip6_tables: Unknown symbol xt_compat_check_entry_offsets (err 0)
ip6_tables: Unknown symbol xt_check_entry_offsets (err 0)
ip6_tables: Unknown symbol xt_copy_counters_from_user (err 0)

Solution that work for me:
I edited /etc/default/ufw and change the option IPV6=yes to IPV6=no.


-- System Information:
Debian Release: 8.5
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)