Re: 2.6.20-rc4: regression: iptables failed to load rules

From: Bill Davidsen
Date: Wed Jan 10 2007 - 17:10:47 EST


Linus Torvalds wrote:

On Tue, 9 Jan 2007, Tomasz Kvarsin wrote:
During boot into 2.6.20-rc4 iptables says
iptables-restore: line 15 failed.
And works fine with my default kernel: 2.6.18.x

I bet you enabled the new transport-agnostic netfilter, and didn't enable some of the actual rules needed for your iptables setup (they have new config names).

I do think that the netfilter team has been very irritating in changing the config names, even if it "is logical".

Somebody should stop the madness, and tell people what config options they need for a regular iptables setup like this. Rather than say "just compile everything". There's about a million different filters, and they all depend on one infrastructure or another.

And then the networking people should F*NG STOP that config name changing madness! The config names should match the _usage_, not some implementation detail. And failing that, leave the config options named something illogical, as long as people don't have to change their config file all the time and answer millions of questions that they don't care about!

This could apply to some other things, like PAE support. Instead of having to know what memory models set what option which impact virtualization, set the option if the feature is needed for any config option choice. This probably hits people wanting virtualization on small memory machines more than others.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/