Re: User defined chaines in OUTPUT chain

On Monday 18 November 2002 12:01, Tino Keitel wrote:
> Hi,
>
> 1. If I use a user defined chain as the target in a rule in the
> filter/OUTPUT chain, all local generated packets will be dropped, even
> if the user defined chain contains only an "-j ACCEPT" rule.
>
> The log rules I used indicated that the packets never return from the
> user defined chain if the user defined chain contains no rules at all
> and default policy is set to RETURN.
>
> If I move the rules that I want to use in the user defined chain into
> the OUTPUT chain, everything will work fine.
>
> 2. I have noticed that the default policy "RETURN" for user defined
> chaines is not mentioned in the manual.

The default policy is ACCEPT.

Thanks for the bug report, this patch against the kernel should fix it.
Please confirm.

cheers,
Bart

--- linux-2.4.20-pre7-houden/net/bridge/netfilter/ebtables.c.old	Tue Nov 19 02:11:07 2002
+++ linux-2.4.20-pre7-houden/net/bridge/netfilter/ebtables.c	Tue Nov 19 02:11:42 2002
@@ -183,7 +183,7 @@
 	point = (struct ebt_entry *)(private->hook_entry[hook]->data);
 	counter_base = cb_base + private->hook_entry[hook]->counter_offset;
 	// base for chain jumps
-	base = (char *)chaininfo;
+	base = private->entries;
 	i = 0;
 	while (i < nentries) {
 		if (ebt_basic_match(point, (**pskb).mac.ethernet, in, out))



-------------------------------------------------------
This sf.net email is sponsored by: To learn the basics of securing 
your web site with SSL, click here to get a FREE TRIAL of a Thawte 
Server Certificate: http://www.gothawte.com/rd524.html