Re: change in behavior of OUTPUT chain rule in 2.6.19

Mike Accetta wrote:
> Jan Engelhardt writes:
> 
>>On Dec 14 2006 13:30, Mike Accetta wrote:
>>
>>>Between 2.6.18 and 2.6.19 (and 2.6.19.1) we've
observed that a reject rule 
>>
>>on
>>
>>>the OUTPUT chain no longer causes a connection
attempt to abort immediately
>>>with "Connection refused".  As a
specific example, this rule
>>>
>>>iptables -A  OUTPUT -p tcp --destination-port 23

>>>--destination 10.0.20.1  -j REJECT --reject-with
tcp-reset
>>
>>I cannot reproduce this with 2.6.20.2. Have you
tried any newer kernel?
> 
> 
> This was filed as Bugzilla #7716 and fixed by Patrick
McHardy in 2.6.20.


The patch was also sent to -stable, I think its in
2.6.19.3.

On Jun 1 2007 17:41, Patrick McHardy wrote:
>>>>
>>>>iptables -A  OUTPUT -p tcp
--destination-port 23 
>>>>--destination 10.0.20.1  -j REJECT
--reject-with tcp-reset
>>>
>>>I cannot reproduce this with 2.6.20.2. Have you
tried any newer kernel?
>> 
>> This was filed as Bugzilla #7716 and fixed by
Patrick McHardy in 2.6.20.
>
>The patch was also sent to -stable, I think its in
2.6.19.3.

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi
?id=7716

Software error:

DBD::mysql::st execute failed: Unknown column
'products.classification_id' in
'where clause' [for Statement "SELECT products.name,
classifications.name FROM
products, classifications WHERE classifications.id =
products.classification_id
ORDER BY classifications.name"] at Bugzilla/DB.pm line
84
	Bugzilla:B::SendS
QL('SELECT products.name, classifications.name FROM
products, cla...') called at globals.pl line 140
	main::GenerateVersionTable() called at globals.pl line 312
	main::GetVersionTable() called at
/var/www/bugzilla.netfilter.org/htdocs/bugzilla/show_bug.cgi
line 60

For help, please send mail to the webmaster (webmasternetfilter.org), giving
this error message and the time and date of the error. 

Sat Jun  2 14:46:26 CEST 2007



	Jan
--