Please include patch in the first comment. It resolves this problem on kernels >=3.5
-- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1234877 Title: ip6tables - --reject-with tcp-reset does not work correctly in chain OUTPUT Status in “linux” package in Ubuntu: Confirmed Bug description: Hello, We use: Description: Ubuntu 12.04.3 LTS Release: 12.04 kernel 3.2.2 (checked also 3.8* and 3.10.5-031005-generic kernels. Same.) iptables=1.4.12-1ubuntu5 and ipv6 We noticed that --reject-with tcp-reset works 7 seconds: ip6tables -I OUTPUT -p tcp --dport 10001 -j REJECT --reject-with tcp-reset such rule ip6tables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination REJECT tcp anywhere anywhere tcp dpt:10001 reject-with tcp-reset time telnet <ourlovelyipv6onlyserver> 10001 Trying 2a02:6b8:0:c10*... telnet: Unable to connect to remote host: Connection timed out real 0m7.012s user 0m0.000s sys 0m0.000s Rule works: ip6tables -vL Chain INPUT (policy ACCEPT 506 packets, 49495 bytes) pkts bytes target prot opt in out source destination Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 346 packets, 37392 bytes) pkts bytes target prot opt in out source destination 3 216 REJECT tcp any any anywhere anywhere tcp dpt:10001 reject-with tcp-reset Tcpdump is empty. Packet counter increases. All well. But it works 7 seconds iptables does the same within 0.005s I think this is a bug. Thank you. Have a nice day. --- AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.25. ApportVersion: 2.0.1-0ubuntu17.1 Architecture: amd64 ArecordDevices: **** List of CAPTURE Hardware Devices **** card 0: PCH [HDA Intel PCH], device 0: ALC269VC Analog [ALC269VC Analog] Subdevices: 1/1 Subdevice #0: subdevice #0 AudioDevicesInUse: USER PID ACCESS COMMAND /dev/snd/controlC0: katyavoid 3072 F.... pulseaudio CRDA: country RU: (2402 - 2482 @ 40), (N/A, 20) (5735 - 5835 @ 20), (N/A, 30) Card0.Amixer.info: Card hw:0 'PCH'/'HDA Intel PCH at 0xf0700000 irq 50' Mixer name : 'Intel PantherPoint HDMI' Components : 'HDA:10ec0269,144dc0d3,00100202 HDA:80862806,80860101,00100000' Controls : 24 Simple ctrls : 10 DistroRelease: Ubuntu 12.04 EcryptfsInUse: Yes HibernationDevice: RESUME=UUID=3063eded-5480-466f-aa94-80e7ad79ded3 InstallationMedia: Ubuntu 12.04.2 LTS "Precise Pangolin" - Release amd64 (20130213) Lsusb: Bus 001 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub Bus 001 Device 004: ID 2232:1024 MachineType: SAMSUNG ELECTRONICS CO., LTD. 900X3C/900X3D/900X4C/900X4D MarkForUpload: True Package: linux (not installed) ProcEnviron: TERM=xterm PATH=(custom, no user) LANG=en_US.UTF-8 SHELL=/bin/bash ProcFB: 0 inteldrmfb ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.5.0-26-generic root=UUID=3418390a-f857-4ee2-86ec-f16d01e5014c ro quiet splash vt.handoff=7 ProcVersionSignature: Ubuntu 3.5.0-26.42~precise1-generic 3.5.7.6 RelatedPackageVersions: linux-restricted-modules-3.5.0-26-generic N/A linux-backports-modules-3.5.0-26-generic N/A linux-firmware 1.79.1 Tags: precise Uname: Linux 3.5.0-26-generic x86_64 UpgradeStatus: No upgrade log present (probably fresh install) UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo dmi.bios.date: 09/19/2012 dmi.bios.vendor: Phoenix Technologies Ltd. dmi.bios.version: P02ABK dmi.board.asset.tag: Base Board Asset Tag dmi.board.name: NP900X3C-A03RU dmi.board.vendor: SAMSUNG ELECTRONICS CO., LTD. dmi.board.version: FAB1 dmi.chassis.asset.tag: No Asset Tag dmi.chassis.type: 9 dmi.chassis.vendor: SAMSUNG ELECTRONICS CO., LTD. dmi.chassis.version: 0.1 dmi.modalias: dmi:bvnPhoenixTechnologiesLtd.:bvrP02ABK:bd09/19/2012:svnSAMSUNGELECTRONICSCO.,LTD.:pn900X3C/900X3D/900X4C/900X4D:pvr0.1:rvnSAMSUNGELECTRONICSCO.,LTD.:rnNP900X3C-A03RU:rvrFAB1:cvnSAMSUNGELECTRONICSCO.,LTD.:ct9:cvr0.1: dmi.product.name: 900X3C/900X3D/900X4C/900X4D dmi.product.version: 0.1 dmi.sys.vendor: SAMSUNG ELECTRONICS CO., LTD. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1234877/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
