The RedHat RPM for some reason compiles the iptables package with
debugging enabled. This makes the program overly paranoid about
different revisions of the netfilter kernel components.
When you build iptables from the source tarball then the Makefile
includes -DNDEBUG to disable all debugging. Unfortunately the RPM
build process overrides the compilation options set in the Makefile
and leaves NDEBUG undefined, causing a lot of debug code to be
On Thursday 14 February 2002 20.01, Chris Chabot wrote:
> I ran into the same problems with 2.4.18pre9, however upgrading to
> iptables 1.2.5 fixed the problem. (there's no redhat packages for
> it yet, i did a compile of the source pkg)
> -- Chris
> Nick Craig-Wood wrote:
> > On Fri, Feb 08, 2002 at 09:46:49AM +0100, Harald Welte wrote:
> >>On Thu, Feb 07, 2002 at 08:24:28PM -0800, H. Peter Anvin wrote:
> >>>I get the following error with iptables on 2.4.18-pre9:
> >>>sudo iptables-restore < /etc/sysconfig/iptables
> >>>iptables-restore: libiptc/libip4tc.c:384: do_check: Assertion
> >>>`h->info.valid_hooks == (1 << 0 | 1 << 3)' failed.
> >>>Abort (core dumped)
> > I've noticed this too.
> > Specifically it is fine with 2.4.17 but broken with
> > 2.4.18-pre7-ac2
> > I use the mangle table to set the TOS for a few things but it
> > gives this error :-
> > iptables -t mangle -A add-tos -p tcp --dport ssh -m tos --tos
> > Minimize-Delay
> > iptables: libiptc/libip4tc.c:384: do_check: Assertion
> > `h->info.valid_hooks == (1 << 0 | 1 << 3)' failed.
> >>Could you please tell me, what iptables version are you using?
> >>(btw: please follow-up to firstname.lastname@example.org)
> > This is using Redhat 7.2 iptables v1.2.4 from the redhat package
> > iptables-1.2.4-2.
> > Apologies if this info is too late but I didn't see a followup to
> > lkml.
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to email@example.com
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/