Re: [SOLUTION] Re: Fw: 2.4.18-pre9: iptables screwed?

[Harald Welte <laforge@gnumonks.org>]

On Fri, Feb 08, 2002 at 11:12:18AM +0100, Stelian Pop wrote:

> > The code you are quoting is only defined if debugging is compiled into 
> > the iptables package. The default distribution of the iptables package
> > does _not_ ship with debugging enabled.
> 
> Right, upon further analysis the redhat RPM is overriding COPT_FLAGS
> and removes the -DNDEBUG from the compile line.

hm. bad coincidence :(

> > We always want to make sure that nobody needs to update the iptables
> > package during the 2.4.x stable kernel series. Because of this (sane)
> > policy, we are keeping back a whole bunch of changes.  We can't just
> > silently abandon backwards compatibility.
> 
> Hey, you keeped backwards compatibility _only_ for those compiling 
> the non debug version of the package. I believe this remains however
> a half-bug...

Well, it is a bug in the debugging code, yes.  We missed to updated the
debugging code when changing the mangle table.  The reason for this is
that not even the developers are using the debugging code.

But when I do compatibility checks / tests for something I want to submit to
the kernel, I use plain unmodified iptables sources - new and old.

And I really didn't expect anybody to run debugging code on production
systems, sorry.

I'm not going to pull this change back out of the kernel because
one (or more) distributors/vendors ship a compiled-with-debug iptables. 

I don't think this was by RedHat's intention. 

> Stelian.
> Stelian Pop <stelian.pop@fr.alcove.com>

-- 
Live long and prosper
- Harald Welte / laforge@gnumonks.org               http://www.gnumonks.org/
============================================================================
GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M+ 
V-- PS++ PE-- Y++ PGP++ t+ 5-- !X !R tv-- b+++ !DI !D G+ e* h--- r++ y+(*)