Re: NAT dropping packets

From: Rusty Russell (rusty@linuxcare.com.au)
Date: Mon Sep 25 2000 - 01:13:35 EST

Next message: Alexander Viro: "Re: [patch] vmfixes-2.4.0-test9-B2"
Previous message: Linus Torvalds: "Re: [patch] vmfixes-2.4.0-test9-B2"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

In message <200009201021.LAA23721@flint.arm.linux.org.uk> you write:
> Hi,
>
> I've just spotted a small problem with 2.4.0-test8 running netfilter:
>
> NAT: 3 dropping untracked packet c065d3a0 1 192.168.0.1 -> 192.168.0.9

Yes. The connection tracking code doesn't try to understand broadcast
packets, so when it sees the ping reply, it doesn't recognize it. The
NAT code then drops the (untracked) packet.

The message has been very useful in highlighing connection tracking
problems in the past 8).

If you don't mind your box `leaking', you can simply comment out this
message and make NAT return NF_ACCEPT for this.

Rusty.

--
Hacking time.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/

Next message: Alexander Viro: "Re: [patch] vmfixes-2.4.0-test9-B2"
Previous message: Linus Torvalds: "Re: [patch] vmfixes-2.4.0-test9-B2"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b29 : Sat Sep 30 2000 - 21:00:13 EST