RE: service start error

Bart,

Thanks that fixed the problem with the service ebtables restart.  I just had to modify /etc/syconfig/selinux.  

However,
I still am not seeing any packets dropped with the rules below.  

ebtables -L --Lc
Bridge table: filter

Bridge chain: INPUT, entries: 1, policy: ACCEPT
-j DROP , pcnt = 0 -- bcnt = 0

Bridge chain: FORWARD, entries: 1, policy: ACCEPT
-j DROP , pcnt = 0 -- bcnt = 0

Bridge chain: OUTPUT, entries: 1, policy: ACCEPT
-j DROP , pcnt = 0 -- bcnt = 0

The following modules are installed:
ebtable_filter          2944  1
ebtables               20992  1 ebtable_filter


Any other thoughts?

Phil


-----Original Message-----
From: Bart De Schuymer [mailto:[email protected]]
Sent: Wed 3/15/2006 9:23 AM
To: Spagnolo, Phillip A
Cc: [email protected]
Subject: Re: [Ebtables-user] service start error
 
Op wo, 15-03-2006 te 08:01 -0800, schreef Spagnolo, Phillip A:
> I have install ebtables-v2.0.8-rc1 on a Fedora Core 4 box with a 2.6.11 kernel.
> 
> After making and installing ebtables, I am able to insert rules, but the rules are not honored.  
> For example, I set rules to drop all packets, but none are dropped.
> Bridge table: filter
> Bridge chain: INPUT, entries: 1, policy: ACCEPT
> -j DROP
> Bridge chain: FORWARD, entries: 1, policy: ACCEPT
> -j DROP
> Bridge chain: OUTPUT, entries: 1, policy: ACCEPT
> -j DROP
> 
> 
> The only visible error I get is when I try to run:
> 
> [root@simulation1 ~]# service ebtables start
> Starting Ethernet bridge filtering (ebtables): /usr/local/sbin/ebtables: error while loading shared libraries: /usr/lib/ebtables/libebtable_broute.so: cannot restore segment prot after reloc: Permission denied
>                                                            [FAILED]

A fast Internet search suggests this has something to do with SELinux.
Please first try the suggestions you can find when googling for
something like "cannot restore segment prot after reloc:".

cheers,
Bart





-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid0944&bid$1720&dat1642