maximum number of iptables rules?

DISCUSSION px 4 participants 4 messages Nov 12, 2003 – Nov 13, 2003

Share & tools

px

author

2003-11-12 23:40 UTC #0 lore raw

Hi, me and a buddy of mine are working on a perl script to automate blocking of about 3000 IP addresses.
The script works fine on his box, x86. But on my box, sparc, I seem to have a limitation of 854 rules before I start to get errors and am unable to add anymore rules.
Is there a maximum number of rules per chain? or overall?

Here is the information on my Sparc box.

Quoted 10 lines

null:~# iptables -t filter -I INPUT 1 -s 66.28.224.0/19 -p all -j blockme
iptables: Memory allocation problem

null:~# iptables -t filter -I INPUT 1 -s 1.2.3.4/19 -p all -j blockme
iptables: Memory allocation problem
null:~# uname -a
Linux null 2.4.21 #1 Thu Aug 7 20:30:12 EDT 2003 sparc64 GNU/Linux
null:~#

Quoted 4 lines

null:~# iptables -L blockme
Chain blockme(854 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere

Here is the info about my buddy's. x86 box

Quoted 8 lines

 root@darkside:/etc/rc.d# uname -a; iptables -L blockme; iptables 
--version
 Linux darkside 2.5.50-ac1 #3 SMP Sun Feb 9 10:21:53 PST 2003 i686 
unknown
 Chain blockme(3966 references)
 target     prot opt source               destination          
 DROP       all  --  anywhere             anywhere            
 iptables v1.2.7a

Any help is greatly appreciated.
-r0b

PS.
Wow, I'm sorry forgot to put that. Im spacey today. My friends x86 linux box has, 256
My sparc box has 512.
-r0b

John Paul

2003-11-13 01:12 UTC #1 lore raw

pptp broken after POM

Hello Folks,

I got my PPTP working before patching my kernel with POM. Below is the log when trying to connect to the vpn server. Am i missing something after the POM patch?

iptables-1.2.9rc1
linux-2.4.22

Thanks.
PJ.

Nov 13 09:11:17 mail pppd[8395]: pppd 2.4.1 started by root, uid 0
Nov 13 09:11:17 mail pppd[8395]: using channel 3
Nov 13 09:11:17 mail pppd[8395]: Using interface ppp1
Nov 13 09:11:17 mail pppd[8395]: Connect: ppp1 <--> /dev/pts/3
Nov 13 09:11:17 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:19 mail pptpd[8394]: GRE: Discarding for incorrect call
Nov 13 09:11:20 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:22 mail pptpd[8394]: GRE: Discarding for incorrect call
Nov 13 09:11:23 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:26 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:26 mail pptpd[8394]: GRE: Discarding for incorrect call
Nov 13 09:11:29 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:30 mail pptpd[8394]: GRE: Discarding for incorrect call
Nov 13 09:11:32 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:34 mail pptpd[8394]: GRE: Discarding for incorrect call
Nov 13 09:11:35 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:38 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:38 mail pptpd[8394]: GRE: Discarding for incorrect call
Nov 13 09:11:41 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:42 mail pptpd[8394]: GRE: Discarding for incorrect call
Nov 13 09:11:44 mail pppd[8395]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x65a9be36> <pcomp> <accomp>]
Nov 13 09:11:46 mail pptpd[8394]: GRE: Discarding for incorrect call
Nov 13 09:11:47 mail pppd[8395]: LCP: timeout sending Config-Requests
Nov 13 09:11:47 mail pppd[8395]: Connection terminated.
Nov 13 09:11:47 mail pppd[8395]: Exit.
Nov 13 09:11:47 mail pptpd[8394]: GRE: read(fd=5,buffer=804d920,len=8196)
from PTY failed: status = -1 error = Input/output error
Nov 13 09:11:47 mail pptpd[8394]: CTRL: PTY read or GRE write failed
(pty,gre)=(5,6)
Nov 13 09:11:47 mail pptpd[8394]: CTRL: Client 10.10.0.99 control connection

finished

Michael Kearey

2003-11-13 02:17 UTC #2 lore raw

Re: pptp broken after POM

Hi John,

Do those of us that use a threading mail client, and yourself a favour..

When you START a NEW thread (New subject etc) please do not REPLY to a message received and change it's subject line. Compose a new messge, and your NEW subject will not be buried in 'maximum number of iptables rules?' thread.

Cheers,
Michael

John Paul

2003-11-13 02:31 UTC #3 lore raw

Re: pptp broken after POM

In reply to John Paul

oooopss... sorry for answering my own query. i have found the problem and has been fixed :-) i was previously using the old .so.

----- Original Message -----
From: "John Paul" <[email protected]>
To: <[email protected]>
Sent: Thursday, November 13, 2003 9:12 AM
Subject: pptp broken after POM

Quoted 44 lines