René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"exception fault in garbage collection","articleBody":"I have not built a new version of the helper library if that has changed let me know.\n## Simple test script to reproduce\n# !/usr/bin/python\n\nimport pprint\nimport iptc\n\nfor chain in iptc.Table(iptc.Table.NAT).chains:\n  print vars(chain)\n\ntable = iptc.Table(iptc.Table.NAT)\ninp = iptc.Chain(table, \"eth1_masq\")\n\nfor r in inp.rules:\n    print \"S:\", r.src, \"-\u003e D:\", r.dst\n\n---- iptables in place to test\n# Generated by iptables-save v1.4.13 on Fri Apr 12 09:32:29 2013\n\n*raw\n:PREROUTING ACCEPT [57:5024]\n:OUTPUT ACCEPT [42:5188]\nCOMMIT\n# Completed on Fri Apr 12 09:32:29 2013\n# Generated by iptables-save v1.4.13 on Fri Apr 12 09:32:29 2013\n\n*filter\n:INPUT DROP [0:0]\n:FORWARD DROP [0:0]\n:OUTPUT DROP [0:0]\n:Drop - [0:0]\n:Reject - [0:0]\n:all2all - [0:0]\n:dmz12all - [0:0]\n:dropBcast - [0:0]\n:dropInvalid - [0:0]\n:dropNotSyn - [0:0]\n:dynamic - [0:0]\n:eth0_fwd - [0:0]\n:eth0_in - [0:0]\n:eth0_out - [0:0]\n:eth1_fwd - [0:0]\n:eth1_in - [0:0]\n:eth1_out - [0:0]\n:fw2dmz1 - [0:0]\n:fw2loc1 - [0:0]\n:loc12dmz1 - [0:0]\n:loc12fw - [0:0]\n:logdrop - [0:0]\n:logreject - [0:0]\n:net12dmz2 - [0:0]\n:reject - [0:0]\n:shorewall - [0:0]\n:smurfs - [0:0]\n-A INPUT -i lo -j ACCEPT\n-A INPUT -i eth0 -j eth0_in\n-A INPUT -i eth1 -j eth1_in\n-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A INPUT -j Reject\n-A INPUT -j LOG --log-prefix \"Shorewall:INPUT:REJECT:\" --log-level 6\n-A INPUT -j reject\n-A FORWARD -i eth0 -j eth0_fwd\n-A FORWARD -i eth1 -j eth1_fwd\n-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A FORWARD -j Reject\n-A FORWARD -j LOG --log-prefix \"Shorewall:FORWARD:REJECT:\" --log-level 6\n-A FORWARD -j reject\n-A OUTPUT -o lo -j ACCEPT\n-A OUTPUT -o eth0 -j eth0_out\n-A OUTPUT -o eth1 -j eth1_out\n-A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A OUTPUT -j Reject\n-A OUTPUT -j LOG --log-prefix \"Shorewall:OUTPUT:REJECT:\" --log-level 6\n-A OUTPUT -j reject\n-A Drop -p tcp -m tcp --dport 113 -j reject\n-A Drop -j dropBcast\n-A Drop -p icmp -m icmp --icmp-type 3/4 -j ACCEPT\n-A Drop -p icmp -m icmp --icmp-type 11 -j ACCEPT\n-A Drop -j dropInvalid\n-A Drop -p udp -m multiport --dports 135,445 -j DROP\n-A Drop -p udp -m udp --dport 137:139 -j DROP\n-A Drop -p udp -m udp --sport 137 --dport 1024:65535 -j DROP\n-A Drop -p tcp -m multiport --dports 135,139,445 -j DROP\n-A Drop -p udp -m udp --dport 1900 -j DROP\n-A Drop -p tcp -j dropNotSyn\n-A Drop -p udp -m udp --sport 53 -j DROP\n-A Reject -p tcp -m tcp --dport 113 -j reject\n-A Reject -j dropBcast\n-A Reject -p icmp -m icmp --icmp-type 3/4 -j ACCEPT\n-A Reject -p icmp -m icmp --icmp-type 11 -j ACCEPT\n-A Reject -j dropInvalid\n-A Reject -p udp -m multiport --dports 135,445 -j reject\n-A Reject -p udp -m udp --dport 137:139 -j reject\n-A Reject -p udp -m udp --sport 137 --dport 1024:65535 -j reject\n-A Reject -p tcp -m multiport --dports 135,139,445 -j reject\n-A Reject -p udp -m udp --dport 1900 -j DROP\n-A Reject -p tcp -j dropNotSyn\n-A Reject -p udp -m udp --sport 53 -j DROP\n-A all2all -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A all2all -j Reject\n-A all2all -j LOG --log-prefix \"Shorewall:all2all:REJECT:\" --log-level 6\n-A all2all -j reject\n-A dmz12all -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A dmz12all -j Drop\n-A dmz12all -j LOG --log-prefix \"Shorewall:dmz12all:DROP:\" --log-level 6\n-A dmz12all -j DROP\n-A dropBcast -d 255.255.255.255/32 -j DROP\n-A dropBcast -d 224.0.0.0/4 -j DROP\n-A dropInvalid -m state --state INVALID -j DROP\n-A dropNotSyn -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP\n-A eth0_fwd -m state --state INVALID,NEW -j dynamic\n-A eth0_fwd -o eth0 -j ACCEPT\n-A eth0_fwd -o eth1 -j all2all\n-A eth0_in -m state --state INVALID,NEW -j dynamic\n-A eth0_in -j all2all\n-A eth0_out -j all2all\n-A eth1_fwd -m state --state INVALID,NEW -j dynamic\n-A eth1_fwd -o eth0 -j net12dmz2\n-A eth1_fwd -o eth1 -j ACCEPT\n-A eth1_in -m state --state INVALID,NEW -j dynamic\n-A eth1_in -j all2all\n-A eth1_out -j all2all\n-A fw2dmz1 -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A fw2dmz1 -j ACCEPT\n-A fw2loc1 -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A fw2loc1 -j ACCEPT\n-A loc12dmz1 -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A loc12dmz1 -j ACCEPT\n-A loc12fw -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A loc12fw -j ACCEPT\n-A logdrop -j LOG --log-prefix \"Shorewall:logdrop:DROP:\" --log-level 6\n-A logdrop -j DROP\n-A logreject -j LOG --log-prefix \"Shorewall:logreject:REJECT:\" --log-level 6\n-A logreject -j reject\n-A net12dmz2 -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A net12dmz2 -d 1.1.1.1/32 -p tcp -m tcp --dport 53 -j ACCEPT\n-A net12dmz2 -p tcp -m tcp --dport 25 -j ACCEPT\n-A net12dmz2 -p tcp -m tcp --dport 80 -j ACCEPT\n-A net12dmz2 -j all2all\n-A reject -d 255.255.255.255/32 -j DROP\n-A reject -d 224.0.0.0/4 -j DROP\n-A reject -s 255.255.255.255/32 -j DROP\n-A reject -s 224.0.0.0/4 -j DROP\n-A reject -p igmp -j DROP\n-A reject -p tcp -j REJECT --reject-with tcp-reset\n-A reject -p udp -j REJECT --reject-with icmp-port-unreachable\n-A reject -p icmp -j REJECT --reject-with icmp-host-unreachable\n-A reject -j REJECT --reject-with icmp-host-prohibited\n-A smurfs -s 255.255.255.255/32 -j LOG --log-prefix \"Shorewall:smurfs:DROP:\" --log-level 6\n-A smurfs -s 255.255.255.255/32 -j DROP\n-A smurfs -s 224.0.0.0/4 -j LOG --log-prefix \"Shorewall:smurfs:DROP:\" --log-level 6\n-A smurfs -s 224.0.0.0/4 -j DROP\nCOMMIT\n# Completed on Fri Apr 12 09:32:29 2013\n# Generated by iptables-save v1.4.13 on Fri Apr 12 09:32:29 2013\n\n*mangle\n:PREROUTING ACCEPT [95:7000]\n:INPUT ACCEPT [87:4968]\n:FORWARD ACCEPT [0:0]\n:OUTPUT ACCEPT [81:12832]\n:POSTROUTING ACCEPT [79:12712]\n:tcfor - [0:0]\n:tcout - [0:0]\n:tcpost - [0:0]\n:tcpre - [0:0]\n-A PREROUTING -j tcpre\n-A FORWARD -j tcfor\n-A OUTPUT -j tcout\n-A POSTROUTING -j tcpost\nCOMMIT\n# Completed on Fri Apr 12 09:32:29 2013\n# Generated by iptables-save v1.4.13 on Fri Apr 12 09:32:29 2013\n\n*nat\n:PREROUTING ACCEPT [8:2032]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [1:60]\n:POSTROUTING ACCEPT [1:40]\n:eth1_masq - [0:0]\n:net1_dnat - [0:0]\n-A PREROUTING -i eth1 -j net1_dnat\n-A POSTROUTING -o eth1 -j eth1_masq\n-A eth1_masq -s 10.10.0.0/16 -j SNAT --to-source 1.2.3.4\n-A eth1_masq -s 10.10.0.1/32 -j SNAT --to-source 1.2.3.4\n-A net1_dnat -p tcp -m tcp --dport 53 -j DNAT --to-destination 1.1.1.1\nCOMMIT\n# Completed on Fri Apr 12 09:32:29 2013\n\n---\n\ngdb results\n\nStarting program: /usr/bin/python test2.py\n{'table': \u003ciptc.ip4tc.Table object at 0x7ffff3d50810\u003e, 'name': 'PREROUTING'}\n{'table': \u003ciptc.ip4tc.Table object at 0x7ffff3d50810\u003e, 'name': 'INPUT'}\n{'table': \u003ciptc.ip4tc.Table object at 0x7ffff3d50810\u003e, 'name': 'OUTPUT'}\n{'table': \u003ciptc.ip4tc.Table object at 0x7ffff3d50810\u003e, 'name': 'POSTROUTING'}\n{'table': \u003ciptc.ip4tc.Table object at 0x7ffff3d50810\u003e, 'name': 'eth1_masq'}\n{'table': \u003ciptc.ip4tc.Table object at 0x7ffff3d50810\u003e, 'name': 'net1_dnat'}\nS: 10.10.0.0/255.255.0.0 -\u003e D: 0.0.0.0/0.0.0.0\nS: 10.10.0.1/255.255.255.255 -\u003e D: 0.0.0.0/0.0.0.0\n\nProgram received signal SIGSEGV, Segmentation fault.\n0x00007ffff6e96d08 in ?? () from /lib/libc.so.6\n(gdb) bt\n#0  0x00007ffff6e96d08 in ?? () from /lib/libc.so.6\n#1  0x00007ffff6e9a38c in free () from /lib/libc.so.6\n#2  0x00007ffff7aadb6b in ?? () from /usr/lib/libpython2.7.so.1.0\n#3  0x00007ffff7acc774 in ?? () from /usr/lib/libpython2.7.so.1.0\n#4  0x00007ffff7aaf37b in PyDict_Clear () from /usr/lib/libpython2.7.so.1.0\n#5  0x00007ffff7aaf4d9 in ?? () from /usr/lib/libpython2.7.so.1.0\n#6  0x00007ffff7b4aa77 in ?? () from /usr/lib/libpython2.7.so.1.0\n#7  0x00007ffff7b4b414 in PyGC_Collect () from /usr/lib/libpython2.7.so.1.0\n#8  0x00007ffff7b3be26 in Py_Finalize () from /usr/lib/libpython2.7.so.1.0\n#9  0x00007ffff7b4971a in Py_Main () from /usr/lib/libpython2.7.so.1.0\n#10 0x00007ffff6e4401d in __libc_start_main () from /lib/libc.so.6\n#11 0x0000000000400621 in _start ()\n\n(gdb) \n","author":{"url":"https://github.com/f34rdotcom","@type":"Person","name":"f34rdotcom"},"datePublished":"2013-04-13T00:37:36.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":2},"url":"https://github.com/24/python-iptables/issues/24"}