CentOS

I will need to study nftables further, it won't be easy because I am using iptables since a long time. I just noticed this behaviour change after installing new machines. I have my default iptables script I deploy on all machines, so they are fairly the same except for some rules depending on the se...

Thank you for the nudge in the right direction.

I have added these rules in the beginning of my iptables script
iptables -Z
iptables -t nat -Z
iptables -t mangle -Z
ip6tables -Z
ip6tables -t mangle -Z

These commands zero out the counters.
The counters do work now.

Kr
Dries

I don't see any important changes between the machines with the command ntf list ruleset. I have erased the IP adresses. Rules on a originally 8.1 machine, (drop and accept counter increases) [root@test ~]# nft list ruleset table ip6 filter { chain INPUT { type filter hook input priority filter; pol...

Hi The rules in iptables have no impact. You can always reproduce this regardless on the configured iptables rules. Even if the policy is ACCEPT, the accept counters do not increase. An originally installed centos 8.1 installation shows me the dropped packets via [root@test ~]# iptables -L -n -v Cha...

Thank you for your response. I had to install nftables for this on both machines. I don't see any significant differences, except for some unimportant rules, both are different machines. An example iptables ruleset I use to accept only local traffic and connections that are originated from the local...

Hi I have searched for this on google, but could not find any help. I seem to notice this issue on new Centos 8.2 installations. Older installations originally installed on Centos 8.1 and upgraded to 8.2 do not seem to have this. I think this is the case. The command iptables -L -n -v normally shoul...

It is resolved, thank you very much! It returns BE, FR and US mirrors, it's maybe to be as a failsafe ... http://centos.cu.be/6/os/x86_64/ http://ftp.belnet.be/ftp.centos.org/6/os/x86_64/ http://centos.mirror.iweb.ca/6/os/x86_64/ http://ftp.jaist.ac.jp/pub/Linux/CentOS/6/os/x86_64/ http://mirrors.co...

Hi

Is there any update yet?
I am sure we are not the only one having this problem.
This could potentially cause slow download speeds for many users.

The geoip database probably needs updates.

Kind regards.

I am getting this list over ipv6: (incorrect, but standard because of standard ipv6 preference) http://centos.den.host-engine.com/6/os/x86_64/ http://mirrors.maine.edu/CentOS/6/os/x86_64/ http://mirror.us.oneandone.net/linux/distributions/centos/6/os/x86_64/ http://mirror.team-cymru.org/CentOS/6/os/...

I've send you all a pm with our ipv6 address. Our ipv4 range is the same age, 6 months old, and is receiving the correct list (Belgium mirrors) In the beginning, when both ranges where justly announced, I thought, maybe because the ranges are quite new it could take some time. But we are a half year...