sunny-beach netfilter # iptables -v -A INPUT -m recent --set iptc_init: valid_hooks=0x0000000e, num_entries=4, size=620 cache_add_entry: entering...0:0 new builtin chain: 0x8058a18 (rules=0x8058a68) 0:0 normal rule: 0x8058a88: standard, verdict=-2 cache_add_entry: entering...1:148 new builtin chain: 0x8058b48 (rules=0x8058b98) iptcc_delete_rule: deleting rule 0x8058a88 (offset 0) 1:148 normal rule: 0x8058a88: standard, verdict=-2 cache_add_entry: entering...2:296 new builtin chain: 0x8058bb8 (rules=0x8058c08) iptcc_delete_rule: deleting rule 0x8058a88 (offset 148) 2:296 normal rule: 0x8058a88: standard, verdict=-2 cache_add_entry: entering...3:444: end of table: iptcc_delete_rule: deleting rule 0x8058a88 (offset 296) 0 opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 recent: SET name: DEFAULT side: source iptcc_compile_chain_offsets: INPUT: chain_head 0, offset=0 iptcc_compile_chain_offsets: rule 0, offset=0, index=0 iptcc_compile_chain_offsets: INPUT; chain_foot 1, offset=392, index=1 iptcc_compile_chain_offsets: FORWARD: chain_head 2, offset=540 iptcc_compile_chain_offsets: FORWARD; chain_foot 2, offset=540, index=2 iptcc_compile_chain_offsets: OUTPUT: chain_head 3, offset=688 iptcc_compile_chain_offsets: OUTPUT; chain_foot 3, offset=688, index=3 iptc_commit: num_entries=5, size=1012, num_counters=4 iptables: Invalid argument [...] fprintf(0xb7ef3560, "%s: %s; chain_foot %u, offset=%u, index=%u\n", "iptcc_compile_chain_offsets", "FORWARD", 2, 540, 2iptcc_compile_chain_offsets: FORWARD; chain_foot 2, offset=540, index=2 ) = 72 fprintf(0xb7ef3560, "%s: %s: chain_head %u, offset=%u\n", "iptcc_compile_chain_offsets", "OUTPUT", 3, 688iptcc_compile_chain_offsets: OUTPUT: chain_head 3, offset=688 ) = 62 fprintf(0xb7ef3560, "%s: %s; chain_foot %u, offset=%u, index=%u\n", "iptcc_compile_chain_offsets", "OUTPUT", 3, 688, 3iptcc_compile_chain_offsets: OUTPUT; chain_foot 3, offset=688, index=3 ) = 71 malloc(1104) = 0x8059278 malloc(64) = 0x8058ea8 malloc(116) = 0x8058ef0 strcpy(0x8059278, "filter") = 0x8059278 fprintf(0xb7ef3560, "%s: num_entries=%u, size=%u, num_counters=%u\n", "iptc_commit", 5, 1012, 4iptc_commit: num_entries=5, size=1012, num_counters=4 ) = 54 open("/tmp/libiptc-so_set_replace.blob", 65, 01001255667) = 4 write(4, "filter", 1104) = 1104 close(4) = 0 setsockopt(3, 0, 64, 0x8059278, 1104) = -1 free(0x8058ef0) = free(0x8058ea8) = free(0x8059278) = __errno_location() = 0xb7dce8a0 memcpy(0xbfe1ffe4, "z\t\005\b\001", 288) = 0xbfe1ffe4 strerror(22) = "Invalid argument" fprintf(0xb7ef3560, "iptables: %s\n", "Invalid argument"iptables: Invalid argument ) = 27 __errno_location() = 0xb7dce8a0 exit(1 +++ exited (status 1) +++ sunny-beach netfilter # zgrep "^CONFIG_\(IP\(6\|\)_\|\)NF_" /proc/config.gz CONFIG_NF_CONNTRACK_ENABLED=m CONFIG_NF_CONNTRACK_SUPPORT=y CONFIG_NF_CONNTRACK=m CONFIG_NF_CT_ACCT=y CONFIG_NF_CONNTRACK_MARK=y CONFIG_NF_CONNTRACK_SECMARK=y CONFIG_NF_CONNTRACK_EVENTS=y CONFIG_NF_CT_PROTO_GRE=m CONFIG_NF_CT_PROTO_SCTP=m CONFIG_NF_CONNTRACK_AMANDA=m CONFIG_NF_CONNTRACK_FTP=m CONFIG_NF_CONNTRACK_H323=m CONFIG_NF_CONNTRACK_IRC=m CONFIG_NF_CONNTRACK_NETBIOS_NS=m CONFIG_NF_CONNTRACK_PPTP=m CONFIG_NF_CONNTRACK_SANE=m CONFIG_NF_CONNTRACK_SIP=m CONFIG_NF_CONNTRACK_TFTP=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CONNTRACK_IPV4=m CONFIG_NF_CONNTRACK_PROC_COMPAT=y CONFIG_IP_NF_QUEUE=m CONFIG_IP_NF_IPTABLES=m CONFIG_IP_NF_MATCH_IPRANGE=m CONFIG_IP_NF_MATCH_TOS=m CONFIG_IP_NF_MATCH_RECENT=m CONFIG_IP_NF_MATCH_ECN=m CONFIG_IP_NF_MATCH_AH=m CONFIG_IP_NF_MATCH_TTL=m CONFIG_IP_NF_MATCH_OWNER=m CONFIG_IP_NF_MATCH_ADDRTYPE=m CONFIG_IP_NF_FILTER=m CONFIG_IP_NF_TARGET_REJECT=m CONFIG_IP_NF_TARGET_LOG=m CONFIG_IP_NF_TARGET_ULOG=m CONFIG_NF_NAT=m CONFIG_NF_NAT_NEEDED=y CONFIG_IP_NF_TARGET_MASQUERADE=m CONFIG_IP_NF_TARGET_REDIRECT=m CONFIG_IP_NF_TARGET_NETMAP=m CONFIG_IP_NF_TARGET_SAME=m CONFIG_NF_NAT_SNMP_BASIC=m CONFIG_NF_NAT_PROTO_GRE=m CONFIG_NF_NAT_FTP=m CONFIG_NF_NAT_IRC=m CONFIG_NF_NAT_TFTP=m CONFIG_NF_NAT_AMANDA=m CONFIG_NF_NAT_PPTP=m CONFIG_NF_NAT_H323=m CONFIG_NF_NAT_SIP=m CONFIG_IP_NF_MANGLE=m CONFIG_IP_NF_TARGET_TOS=m CONFIG_IP_NF_TARGET_ECN=m CONFIG_IP_NF_TARGET_TTL=m CONFIG_IP_NF_TARGET_CLUSTERIP=m CONFIG_IP_NF_RAW=m CONFIG_IP_NF_ARPTABLES=m CONFIG_IP_NF_ARPFILTER=m CONFIG_IP_NF_ARP_MANGLE=m CONFIG_IP_NF_TARGET_TARPIT=m CONFIG_NF_CONNTRACK_IPV6=m CONFIG_IP6_NF_QUEUE=m CONFIG_IP6_NF_IPTABLES=m CONFIG_IP6_NF_MATCH_RT=m CONFIG_IP6_NF_MATCH_OPTS=m CONFIG_IP6_NF_MATCH_FRAG=m CONFIG_IP6_NF_MATCH_HL=m CONFIG_IP6_NF_MATCH_OWNER=m CONFIG_IP6_NF_MATCH_IPV6HEADER=m CONFIG_IP6_NF_MATCH_AH=m CONFIG_IP6_NF_MATCH_MH=m CONFIG_IP6_NF_MATCH_EUI64=m CONFIG_IP6_NF_FILTER=m CONFIG_IP6_NF_TARGET_LOG=m CONFIG_IP6_NF_TARGET_REJECT=m CONFIG_IP6_NF_MANGLE=m CONFIG_IP6_NF_TARGET_HL=m CONFIG_IP6_NF_RAW=m sunny-beach netfilter # lsmod Module Size Used by ipt_recent 8856 0 xt_state 2368 0 xt_conntrack 2688 0 iptable_filter 2848 0 iptable_mangle 2688 1 ipt_MASQUERADE 3776 1 ipt_REDIRECT 2336 1 iptable_nat 7780 1 nf_nat 17452 3 ipt_MASQUERADE,ipt_REDIRECT,iptable_nat nf_conntrack_ipv4 17420 2 iptable_nat xt_NOTRACK 1856 1 nf_conntrack 58168 7 xt_state,xt_conntrack,ipt_MASQUERADE,iptable_nat,nf_nat,nf_conntrack_ipv4,xt_NOTRACK iptable_raw 1952 1 ip_tables 11784 4 iptable_filter,iptable_mangle,iptable_nat,iptable_raw