DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :cc:content-type;
        b=AB5N1aGIcRzPFkmZgeaglDUuKULFcNlBjDshPXgtVqKg9RqHGzHoPomehncRA0Zq3I
         YSry+UUceTtNSUwnFVpcrbr1EEH3KumAP4gbHjkdrXedvbGhZ7Gt+dr9kFZvPULYN7pP
         9wkR9/tkG2ai5ux6Tuqn+2uSTZl2pwBeo93R8=
Precedence: list
MIME-Version: 1.0
In-Reply-To: <20090827031308.237a156e@sneezy.prov.us>
References: <20090827031308.237a156e@sneezy.prov.us>
Date: Thu, 27 Aug 2009 12:37:14 +0200
Message-ID: <95408c820908270337w56494e3en468936a62661be55@mail.gmail.com>
Subject: Re: [alpine-devel] iptables error on 2.6.26-vsgrsec
From: Natanael Copa <natanael.copa@gmail.com>
To: John Keith Hohm <john@hohm.net>
Cc: alpine <alpine-devel@lists.alpinelinux.org>
Content-Type: multipart/alternative; boundary=0015174bea84a235ce04721d2634

--0015174bea84a235ce04721d2634
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

On Thu, Aug 27, 2009 at 10:13 AM, John Keith Hohm <john@hohm.net> wrote:

> Alpine Linux is awesome, thanks so much to all the contributors.
>
> This morning when I upgraded our Alpine Linux 1.7.27 firewall with
> kernel 2.6.25-hardened-r10 to Alpine Linux 1.8.3 with kernel
> 2.6.26-vsgrsec I was unable to start shorewall; it complained like:
>
> iptables: Memory allocation problem


The 2.6.26-vsgrsec kernel have known issues. If you need a vserver host then
you'd probably need an older 2.6.22 based kernel (something like alpine
1.7.26 or earlier)


> Fortunately I was able to reboot into the upgraded system with the
> older 2.6.25-hardened-r10 kernel and get the firewall working (well,
> after some racoon.conf edits, but I digress).
>
> How do I allow iptables to use more memory on the 2.6.26-vsgrsec kernel?
> The server is not low on physical memory (it has 2 GB installed).  I
> have a similar system with the same Alpine Linux 1.8.3 running the same
> 2.6.26-vsgrsec kernel and the same custom shorewall-4.2.10 packages but
> a much simpler shorewall rule set, which starts up fine.


i would recommend try 1.9 beta4 if you need more recent kernel. (it does
have some issues with kernel modules that needs string parameters but i
think that was fixed in the update i did today -  i havent been able to test
it yet thoug). beta4 should also have the shorewall 4.x packages. If you
have problems with this, please let us know and we will fix asap. (im on
vacation right now so probabably next week)

-nc

--0015174bea84a235ce04721d2634
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div class=3D"gmail_quote">On Thu, Aug 27, 2009 at 10:13 AM, John Keith Hoh=
m <span dir=3D"ltr">&lt;<a href=3D"mailto:john@hohm.net">john@hohm.net</a>&=
gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"border-left=
: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1e=
x;">
Alpine Linux is awesome, thanks so much to all the contributors.<br>
<br>
This morning when I upgraded our Alpine Linux 1.7.27 firewall with<br>
kernel 2.6.25-hardened-r10 to Alpine Linux 1.8.3 with kernel<br>
2.6.26-vsgrsec I was unable to start shorewall; it complained like:<br>
<br>
iptables: Memory allocation problem</blockquote><div><br>The 2.6.26-vsgrsec=
 kernel have known issues. If you need a vserver host then you&#39;d probab=
ly need an older 2.6.22 based kernel (something like alpine 1.7.26 or earli=
er)<br>
=A0<br></div><blockquote class=3D"gmail_quote" style=3D"border-left: 1px so=
lid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Fortunately I was able to reboot into the upgraded system with the<br>
older 2.6.25-hardened-r10 kernel and get the firewall working (well,<br>
after some racoon.conf edits, but I digress).<br>
<br>
How do I allow iptables to use more memory on the 2.6.26-vsgrsec kernel?<br=
>
The server is not low on physical memory (it has 2 GB installed). =A0I<br>
have a similar system with the same Alpine Linux 1.8.3 running the same<br>
2.6.26-vsgrsec kernel and the same custom shorewall-4.2.10 packages but<br>
a much simpler shorewall rule set, which starts up fine.</blockquote><div><=
br>i would recommend try 1.9 beta4 if you need more recent kernel. (it does=
 have some issues with kernel modules that needs string parameters but i th=
ink that was fixed in the update i did today -=A0 i havent been able to tes=
t it yet thoug). beta4 should also have the shorewall 4.x packages. If you =
have problems with this, please let us know and we will fix asap. (im on va=
cation right now so probabably next week)<br>
<br>-nc<br></div></div><br>

--0015174bea84a235ce04721d2634--


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---