From mboxrd@z Thu Jan  1 00:00:00 1970
From: DervishD <lartc@dervishd.net>
Date: Tue, 13 Dec 2005 09:18:20 +0000
Subject: Re: [LARTC] MARK: targinfosize 8 != 4
Message-Id: <20051213091820.GA1021@DervishD>
List-Id: <lartc.vger.kernel.org>
References: <00fe01c5ffb5$f0a7cf20$455f030a@askeyrd3>
In-Reply-To: <00fe01c5ffb5$f0a7cf20$455f030a@askeyrd3>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
To: lartc@vger.kernel.org

    Hi Salim :)

 * Salim <salim.si@askey.com.tw> dixit:
>    I got this problem while trying to shape traffic with iptables MARK and
> HTB.
>=20
> MARK: targinfosize 8 !=3D 4
>=20
> --set-mark gives "invalid argument" error message.
>
> Kernel version is 2.4.29 (some patches from patch o matic applied)
> Iptables version 1.3.4
>=20
> Intel x86 architecture.
>=20
> I saw this problem discussed in a few places, but the discussions didn't
> come to a conclusion or solution.

    You've hit a bug in iptables :( I've notified in the bugzilla but
I have had no answers. You're building iptables with no shared
libraries (NO_SHARED_LIBS=3D1). This means that the code in iptables,
when loading the "modules" for the matches and targets is taking a
slightly different code path. The problem is that the MARK target
has two versions, 0 and 1, and kernel 2.4.x (at least until 31)
supports only version 0. If you don't use share libraries in
iptables, both versions are loaded and v1 is used instead of v2.
Unfortunately, v1 has a bigger data structure than v0 and your kernel
complaints.

    The only solution for your problem is to rebuild iptables with
shared libraries instead of compiling the matches and targets in the
binary, statically. I've tried to make a patch, and worked for me but
I don't want to mess anything so I've described the problem, the
wrong code path and other details to the iptables people. If you want
to take a look the bug is #413 in bugzilla.netfilter.org

    And yes, nobody seems to have this problem because it seems that
only few people uses iptables built statically :?? or because nobody
seems to be interested.

    Ra=FAl N=FA=F1ez de Arenas Coronado

--=20
Linux Registered User 88736 | http://www.dervishd.net
http://www.pleyades.net & http://www.gotesdelluna.net
It's my PC and I'll cry if I want to...
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc