Hi Chuck if its any help the last kernel that did not cause this problem
was 2.4.17-2.. So maybe routing through the change notes might reveal
something. 2.4.17-2 works ok with iptables..
might give a kernel guru a clue ???
HTH
bg richard
On Mon, 2002-02-04 at 20:55, Chuck Shirley wrote:
> See here:
>
> [root@localhost root]# service bastille-firewall start
> iptables: libiptc/libip4tc.c:384: do_check: Assertion `h->info.valid_hooks == (1 <<
>0 | 1 << 3)' failed.
> /sbin/bastille-netfilter: line 578: 2760 Aborted (core dumped)
>${IPTABLES} -t mangle -F PREROUTING
> Setting up IP spoofing protection... done.
> Allowing traffic from trusted interfaces... done.
> Setting up chains for public/internal interface traffic... done.
> Setting up general rules... done.
> Setting up outbound rules... done.
>
>
> I've looked at the bastille-netfilter script, and the noted failure
> point is at the end of the case-esac block that checks start/stop/status
> on the command line. Unfortunately there I am either too tired, too
> stupid, or some non-linear combination of the two to figure out
> what is making it break. Tell me what to do to help fix the problem
> and I'll do it. By the way, the netfilter does seem to come up.
> Go figure, eh? I tried --rebuilding from the srpm, but the same
> result was had with kernel 2.4.17.12, 13, and with 14 I can't rebuild
> the package (two updates to rpm since I last successfully did the
> --rebuild...(correlation vs. cause problem here...))
>
>
> --
> *Chuck*
>