FYI: iptables binary compatibility mess

FYI: iptables binary compatibility mess

[Henrik Nordstrom]

This is just a notice that there seems to be a p-o-m patch in 2.4
pending/base CVS which breaks compatibility with older iptables binaries.

Noticed this when after a kernel upgrade to 2.4.22+latest p-o-m our
iptables 1.2.8 (CVS 15 May) binaries no longer worked. It could list the
(empty) tables, but any attempts to insert any kind of rule was always
rejecter by the kernel, even the simplest "null" rule without any matches 
or targets.

The errors returned was someting like the following:

  iptables -A INPUT
  Invalid argument

  iptables-restore
  *filter
  COMMIT
  Error occurred at line: 2


A recompile of iptables to the current CVS version corrected the problem.

Regards
Henrik

Re: FYI: iptables binary compatibility mess

[Jozsef Kadlecsik]

On Thu, 30 Oct 2003, Henrik Nordstrom wrote:

> This is just a notice that there seems to be a p-o-m patch in 2.4
> pending/base CVS which breaks compatibility with older iptables binaries.
[...]
> A recompile of iptables to the current CVS version corrected the problem.

We should add a flag to such patches so that runme could warn that
iptables must be recompiled.

Best regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary