From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1755879AbbCLTsV (ORCPT ); Thu, 12 Mar 2015 15:48:21 -0400 Received: from mx1.redhat.com ([209.132.183.28]:39612 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754742AbbCLTsR (ORCPT ); Thu, 12 Mar 2015 15:48:17 -0400 Date: Thu, 12 Mar 2015 15:47:56 -0400 (EDT) Message-Id: <20150312.154756.1175332873553032640.davem@redhat.com> To: fw@strlen.de Cc: david@unsolicited.net, netdev@vger.kernel.org, linux-kernel@vger.kernel.org, pablo@netfilter.org, stable@vger.kernel.org, gregkh@linuxfoundation.org Subject: Re: iptables problem upgrading kernel from 3.18.8 to 3.19.1 From: David Miller In-Reply-To: <20150308175553.GA1528@breakpoint.cc> References: <54FC2089.6080809@unsolicited.net> <20150308175553.GA1528@breakpoint.cc> Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org From: Florian Westphal Date: Sun, 8 Mar 2015 18:55:53 +0100 > David R wrote: > > [ CC Pablo & stable@ ] > >> I've just had an exception to my "uneventful kernel upgrade" monotony. >> >> My boot scripts failed when setting up the firewall due to this :- >> >> xt_recent: hitcount (1) is larger than packets to be remembered (1) >> for table xxxx >> >> This is a completely straightforward >> >> iptables -A yyyy -j REJECT -p tcp --reject-with tcp-reset -m recent >> --set --name xxxx --rsource >> >> Looking at the history for xt_recent.c it looks like this was introduced >> in abc86d0f99242b7f142b7cb8f90e30081dd3c256 but maybe corrected in >> cef9ed86ed62eeffcd017882278bbece32001f86 ? > > Right. I would recommend to revert abc86d0f99242b7f142b7cb8f90e30081dd3c256 > in 3.19.y series rather than applying cef9ed86ed62, though. Greg, please queue up a revert of abc86d0f99242b7f142b7cb8f90e30081dd3c256 for 3.19.x -stable, if you haven't done so already. Thanks.