Problems with xtables-addons 1.3.7 on Gentoo

Problems with xtables-addons 1.3.7 on Gentoo

[Pandu Poluan]

I'm having troubles with xtables-addons 1.3.7 on Gentoo.

I successfully installed xtables-addons (no errors), but all attempts
to create an IP set (e.g., `ipset --create test hash:ip`) resulted in
the following error message:

FATAL: Error inserting ip_set
(/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko):
Invalid module format

`insmod` begat an additional information:

insmod: error inserting
'/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko':
-1 Invalid module format

`dmesg | tail -1` gave a worrying error:

[ 4085.271442] ip_set: exports duplicate symbol ip_set_nfnl_put (owned
by kernel)

What should I do?

Rgds,
-- 
Pandu E Poluan
~ IT Optimizer ~

 • Blog : http://pepoluan.tumblr.com
 • Linked-In : http://id.linkedin.com/in/pepoluan

Re: Problems with xtables-addons 1.3.7 on Gentoo

[nowhere]

В Птн, 05/08/2011 в 20:19 +0700, Pandu Poluan пишет:
> I'm having troubles with xtables-addons 1.3.7 on Gentoo.
> 
> I successfully installed xtables-addons (no errors), but all attempts
> to create an IP set (e.g., `ipset --create test hash:ip`) resulted in
> the following error message:
> 
> FATAL: Error inserting ip_set
> (/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko):
> Invalid module format
> 
> `insmod` begat an additional information:
> 
> insmod: error inserting
> '/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko':
> -1 Invalid module format
> 
> `dmesg | tail -1` gave a worrying error:
> 
> [ 4085.271442] ip_set: exports duplicate symbol ip_set_nfnl_put (owned
> by kernel)
> 
> What should I do?

Do you by any chance have ipset enabled in kernel config or ipset
separatedly installed with "modules" use-flag?

> 
> Rgds,

Re: Problems with xtables-addons 1.3.7 on Gentoo

[Pandu Poluan]

On Fri, Aug 5, 2011 at 20:41, nowhere <nowhere@hakkenden.ath.cx> wrote:
> В Птн, 05/08/2011 в 20:19 +0700, Pandu Poluan пишет:
>> I'm having troubles with xtables-addons 1.3.7 on Gentoo.
>>
>> I successfully installed xtables-addons (no errors), but all attempts
>> to create an IP set (e.g., `ipset --create test hash:ip`) resulted in
>> the following error message:
>>
>> FATAL: Error inserting ip_set
>> (/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko):
>> Invalid module format
>>
>> `insmod` begat an additional information:
>>
>> insmod: error inserting
>> '/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko':
>> -1 Invalid module format
>>
>> `dmesg | tail -1` gave a worrying error:
>>
>> [ 4085.271442] ip_set: exports duplicate symbol ip_set_nfnl_put (owned
>> by kernel)
>>
>> What should I do?
>
> Do you by any chance have ipset enabled in kernel config or ipset
> separatedly installed with "modules" use-flag?
>

Yes, I have ipset enabled in kernel, and no, I don't have ipset
installed separately.

A kind friend at gentoo-user led me to CONFIG_IP_SET

Apparently xtables-addons hates IP_SET=y

So, I rebuild the kernel with IP_SET=m , and all is well.

Anyways, thank you for your attempt to help :-)

Rgds,
-- 
Pandu E Poluan
~ IT Optimizer ~

 • Blog : http://pepoluan.tumblr.com
 • Linked-In : http://id.linkedin.com/in/pepoluan

Re: Problems with xtables-addons 1.3.7 on Gentoo

[Jan Engelhardt]

On Friday 2011-08-05 15:49, Pandu Poluan wrote:

>On Fri, Aug 5, 2011 at 20:41, nowhere <nowhere@hakkenden.ath.cx> wrote:
>> В Птн, 05/08/2011 в 20:19 +0700, Pandu Poluan пишет:
>>> I'm having troubles with xtables-addons 1.3.7 on Gentoo.
>>>
>>> I successfully installed xtables-addons (no errors), but all attempts
>>> to create an IP set (e.g., `ipset --create test hash:ip`) resulted in
>>> the following error message:
>>>
>>> FATAL: Error inserting ip_set
>>> (/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko):
>>> Invalid module format
>>>
>>> `insmod` begat an additional information:
>>>
>>> insmod: error inserting
>>> '/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko':
>>> -1 Invalid module format
>>>
>>> `dmesg | tail -1` gave a worrying error:
>>>
>>> [ 4085.271442] ip_set: exports duplicate symbol ip_set_nfnl_put (owned
>>> by kernel)
>>>
>>> What should I do?
>>
>> Do you by any chance have ipset enabled in kernel config or ipset
>> separatedly installed with "modules" use-flag?
>>
>
>Yes, I have ipset enabled in kernel, and no, I don't have ipset
>installed separately.
>
>A kind friend at gentoo-user led me to CONFIG_IP_SET
>
>Apparently xtables-addons hates IP_SET=y
>
>So, I rebuild the kernel with IP_SET=m , and all is well.

There is no reason to enable ipset in both the kernel and in xt-a.

Re: Problems with xtables-addons 1.3.7 on Gentoo

[Pandu Poluan]

(Please forgive my top-posting)

So, I should set IP_SET=n ?

Doesn't the ipset(8) command require support from the kernel?

I'm rather confused...

Rgds,


On 2011-08-05, Jan Engelhardt <jengelh@medozas.de> wrote:
> On Friday 2011-08-05 15:49, Pandu Poluan wrote:
>
>>On Fri, Aug 5, 2011 at 20:41, nowhere <nowhere@hakkenden.ath.cx> wrote:
>>> В Птн, 05/08/2011 в 20:19 +0700, Pandu Poluan пишет:
>>>> I'm having troubles with xtables-addons 1.3.7 on Gentoo.
>>>>
>>>> I successfully installed xtables-addons (no errors), but all attempts
>>>> to create an IP set (e.g., `ipset --create test hash:ip`) resulted in
>>>> the following error message:
>>>>
>>>> FATAL: Error inserting ip_set
>>>> (/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko):
>>>> Invalid module format
>>>>
>>>> `insmod` begat an additional information:
>>>>
>>>> insmod: error inserting
>>>> '/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko':
>>>> -1 Invalid module format
>>>>
>>>> `dmesg | tail -1` gave a worrying error:
>>>>
>>>> [ 4085.271442] ip_set: exports duplicate symbol ip_set_nfnl_put (owned
>>>> by kernel)
>>>>
>>>> What should I do?
>>>
>>> Do you by any chance have ipset enabled in kernel config or ipset
>>> separatedly installed with "modules" use-flag?
>>>
>>
>>Yes, I have ipset enabled in kernel, and no, I don't have ipset
>>installed separately.
>>
>>A kind friend at gentoo-user led me to CONFIG_IP_SET
>>
>>Apparently xtables-addons hates IP_SET=y
>>
>>So, I rebuild the kernel with IP_SET=m , and all is well.
>
> There is no reason to enable ipset in both the kernel and in xt-a.
>


-- 
--
Pandu E Poluan - IT Optimizer
My website: http://pandu.poluan.info/

Re: Problems with xtables-addons 1.3.7 on Gentoo

[Jan Engelhardt]

On Friday 2011-08-05 17:44, Pandu Poluan wrote:

>(Please forgive my top-posting)
>
>So, I should set IP_SET=n ?
>
>Doesn't the ipset(8) command require support from the kernel?

Did it occur to you that kernel modules can provide just that?

Re: Problems with xtables-addons 1.3.7 on Gentoo

[Pandu Poluan]

*red from embarrassment*

Yes, of course.

That begat a question though: Why the options in the kernel config, then?

Rgds,


On 2011-08-05, Jan Engelhardt <jengelh@medozas.de> wrote:
> On Friday 2011-08-05 17:44, Pandu Poluan wrote:
>
>>(Please forgive my top-posting)
>>
>>So, I should set IP_SET=n ?
>>
>>Doesn't the ipset(8) command require support from the kernel?
>
> Did it occur to you that kernel modules can provide just that?
>


-- 
--
Pandu E Poluan - IT Optimizer
My website: http://pandu.poluan.info/

Re: Problems with xtables-addons 1.3.7 on Gentoo

[Mr Dash Four]

> That begat a question though: Why the options in the kernel config, then?
>   
For people like myself, who do not use xtables, but use ipset (kernel 
modules) as part of the kernel build and then build/install ipset (the 
executable) separately.

Re: Problems with xtables-addons 1.3.7 on Gentoo

[Pandu Poluan]

Ah, I see. Thanks for the explanation :)

Rgds,


On 2011-08-06, Mr Dash Four <mr.dash.four@googlemail.com> wrote:
>
>> That begat a question though: Why the options in the kernel config, then?
>>
> For people like myself, who do not use xtables, but use ipset (kernel
> modules) as part of the kernel build and then build/install ipset (the
> executable) separately.
>
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>


-- 
--
Pandu E Poluan - IT Optimizer
My website: http://pandu.poluan.info/

Re: Problems with xtables-addons 1.3.7 on Gentoo

[Jan Engelhardt]

On Friday 2011-08-05 19:05, Pandu Poluan wrote:

>*red from embarrassment*
>
>Yes, of course.
>
>That begat a question though: Why the options in the kernel config, then?

Because ipset (the kernel components) have been merged thereto?