NAT dropping packets

From: Russell King (rmk@arm.linux.org.uk)
Date: Wed Sep 20 2000 - 05:21:45 EST


Hi,

I've just spotted a small problem with 2.4.0-test8 running netfilter:

NAT: 3 dropping untracked packet c065d3a0 1 192.168.0.1 -> 192.168.0.9

This seems to be caused when you have connection tracking enabled, and
you ping the local network broadcast address. The filter rules specific
to the ethernet interface where this packet originated from and the above
response was dropped has the filter rules setup thus:

 iptables -A INPUT -i eth0 -j ACCEPT
 iptables -A OUTPUT -o eth0 -j ACCEPT

There isn't any NAT in operation on eth0 (but there is NAT for packets
going via other interfaces).

If you require more information on the setup, let me know, and I'll provide
it in private mail.
   _____
  |_____| ------------------------------------------------- ---+---+-
  | | Russell King rmk@arm.linux.org.uk --- ---
  | | | | http://www.arm.linux.org.uk/personal/aboutme.html / / |
  | +-+-+ --- -+-
  / | THE developer of ARM Linux |+| /|\
 / | | | --- |
    +-+-+ ------------------------------------------------- /\\\ |
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Sat Sep 23 2000 - 21:00:23 EST