1 |
On Fri, Aug 5, 2011 at 20:24, Michael Mol <mikemol@×××××.com> wrote: |
2 |
> On Fri, Aug 5, 2011 at 9:11 AM, Pandu Poluan <pandu@××××××.info> wrote: |
3 |
>> I'm having troubles with net-firewall/xtables-addons-1.3.7 |
4 |
>> |
5 |
>> emerge is successful, but all attempts to create an IP set (e.g., |
6 |
>> `ipset --create test hash:ip`) resulted in the following error |
7 |
>> message: |
8 |
>> |
9 |
>> FATAL: Error inserting ip_set |
10 |
>> (/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko): |
11 |
>> Invalid module format |
12 |
>> |
13 |
>> `insmod` begat an additional information: |
14 |
>> |
15 |
>> insmod: error inserting |
16 |
>> '/lib/modules/2.6.39-hardened-r8PANS_GW_BN_02/xtables_addons/ip_set.ko': |
17 |
>> -1 Invalid module format |
18 |
>> |
19 |
>> `dmesg | tail -1` gave a worrying error: |
20 |
>> |
21 |
>> [ 4085.271442] ip_set: exports duplicate symbol ip_set_nfnl_put (owned |
22 |
>> by kernel) |
23 |
>> |
24 |
>> What should I do? |
25 |
> |
26 |
> I don't know much about xtables, but ISTR it's a fork (or supplement?) |
27 |
> to iptables. |
28 |
> |
29 |
|
30 |
Supplement, actually. It provides modules that for some reason haven't |
31 |
made it into iptables itself. |
32 |
|
33 |
> That sounds like a symbol conflict, such as if you were to try to |
34 |
> insert a module into a kernel, where the kernel already had the code |
35 |
> built-in. |
36 |
> |
37 |
> Check your kernel configuration and ensure that all of the iptables |
38 |
> stuff is built as modules, rather than built-in. Then (I suspect) it |
39 |
> should be a matter of figuring out which module conflicts. |
40 |
> |
41 |
|
42 |
Hmmm... okay, I'll try to build another kernel. |
43 |
|
44 |
There's this whole page of "IPset" in `make menuconfig` that I had |
45 |
naively set to built-in. |
46 |
|
47 |
I'll post updates. |
48 |
|
49 |
Rgds, |
50 |
-- |
51 |
Pandu E Poluan |
52 |
~ IT Optimizer ~ |
53 |
|
54 |
• Blog : http://pepoluan.tumblr.com |
55 |
• Linked-In : http://id.linkedin.com/in/pepoluan |