Unable to add rule on Chain with 28 characters

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

I'm trying do add a rule on a user-defined chain, on the NAT table, with 28 characters.

The chain have bee added without any problem, but when I add the rule, iptables says that it's unable do find the chain.

If I reduce the chain to 25 characters, it works. I'm trying to migrate a set of rules form iptables-1.2.11 to 1.3.1, and I don't want to rewrite the rules.

Someone can help me?

My iptables version: 1.3.1
My kernel version: 2.4.31

POM-Patches:

CLASSIFY
SAME
comment
NETMAP
iprange
quota
time
IPMARK
ROUTE
account
h323-conntrack-nat
ipp2p
l7-filter-pom-1.4
mms-conntrack-nat
msnp-conntrack-nat
pptp-conntrack-nat
quake3-conntrack-nat
string
mport

Thanks in advance.

- --
Rafael Dreher

- -:: Red Hat Certified Engineer ::-
- -:: Nr: 807303498507617 ::-
http://www.redhat.com/training/certification/verify
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFCzsuhGgX4r17upEoRAiSEAKCFXiQwYyYFZY9RbIMsUAdI8gkGmgCgorWt 2bTPgyVCPQhkP6IJNSyVlZQ=
=vz3q
-----END PGP SIGNATURE-----

<snip>

I don't have a direct solution for you. From what I recall, the chain name length is hard-coded at 32 characters. That bit us on the ISCS network security management project (http://iscs.sourceforge.net) where we had very long names due to the hierarchical structure of groups and the inheritance model. We switched to automatically generating chain names based upon incrementing numbers.

I do not know if the size of the name field has changed with subsequent iptables versions. Wish I could be of more help - John

John A. Sullivan III
Open Source Development Corporation
+1 207-985-7880
[email protected]

Financially sustainable open source development
http://www.opensourcedevel.com