Package: linux-2.6
Version: 2.6.18-6
Severity: important
Tags: patch
Hello,
When I try to use the '-m multiport' argument of iptables, I have the
following error message:
# /sbin/iptables -A INPUT -p tcp -m multiport --sports \
ssh,www,imap2,pop3,domain,https,smtp,auth -m state \
--state NEW,ESTABLISHED,RELATED -j ACCEPT
getsockopt failed strangely: Invalid argument
According to Patrick McHardy[0], this error appears because "the 32 bit
compat code doesn't implement the SO_GET_REVISION_MATCH/TARGET options
and returned an error" in kernel version > 2.6.16 and < 2.6.19, a patch
is available[1]. I built the kernel image using this patch and this
error doesn't appear anymore.
Regards,
Arnaud Fontaine
[0]
https://lists.netfilter.org/pipermail/netfilter-devel/2006-December/026262.html
[1]
https://lists.netfilter.org/pipermail/netfilter-devel/2006-December/026266.html
-- System Information:
Debian Release: 4.0
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable')
Architecture: sparc (sparc64)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-3-sparc64-smp
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
