This is a me too to say I think I'm seeing the same bug, but from a
different use case: trying to run a Shorewall firewall on Noble.

~$ uname -a
Linux xxxxxx 6.8.0-57-generic #59-Ubuntu SMP PREEMPT_DYNAMIC Sat Mar 15 
17:40:59 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

I see the following errors:

--8<--
Preparing ip6tables-restore input...
Running /sbin/ip6tables-restore --wait 60...
Warning: Extension MARK revision 0 not supported, missing kernel module?
ip6tables-restore v1.8.10 (nf_tables): MARK: bad value for option "--set-mark", 
or out of range (0-4294967295).

Error occurred at line: 48
Try `ip6tables-restore -h' or 'ip6tables-restore --help' for more information.
   ERROR: ip6tables-restore Failed. Input is in 
/var/lib/shorewall6/.ip6tables-restore-input
--8<--

Line 48 of /var/lib/shorewall6/.ip6tables-restore-input says:

--8<--
-A FORWARD -j MARK --set-mark 0/0xff
--8<--

Reverting to 6.8.0-55 works.

Will try 6.8.0-58.60 when it arrives to confirm fix.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2104282

Title:
  iptables NFLOG TRACE MARK incompatibility

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2104282/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to