Re: [SOLUTION] Re: Fw: 2.4.18-pre9: iptables screwed?

From: Bill Davidsen (davidsen@tmr.com)
Date: Mon Feb 11 2002 - 13:11:51 EST


On Fri, 8 Feb 2002, Harald Welte wrote:

> On Fri, Feb 08, 2002 at 01:08:39AM -0800, David Miller wrote:
>
> > Stelian has analyzed the bug already.
>
> This is strange.
>

> The code you are quoting is only defined if debugging is compiled into
> the iptables package. The default distribution of the iptables package
> does _not_ ship with debugging enabled.
>
> The Makefile of all iptables versions between 1.1.1 (released way before
> the linux 2.4.0 kernel came out!) and 1.2.5 (current) have the following
> line in the Makefile:

What is the first thing anyone would do if they had a problem with
iptables? Turn on debugging, obviously.

1 - that explains why I have no problem, I build from source, since I'm
    always trying features in the new versions for better firewalls.
2 - it really should work, debug should find errors, not cause them.
3 - Perhaps debug could be disabled but default, so instead of needing
    NDEBUG in production, you would use -DDEBUG when you had a problem
    (and it might even work ;-).

-- 
bill davidsen <davidsen@tmr.com>
  CTO, TMR Associates, Inc
Doing interesting things with little computers since 1979.

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Fri Feb 15 2002 - 21:00:40 EST