iptables 2.6.38, can kernel erroneously bypass PREROUTING ?

[Martin Devera]

Hello,

we have problem with high-bw router (1gbit, conntrack, nat, htb qos) 
where after some time (weeks) DNAT stops working.
I tried to include "-t raw -A PREROUTING -i eth0" an it got ZERO hits
while -i eth1 has many.
Thus DNAT (in -t nat) doesn't work but interestingly conntrack (and thus
SNAT records) is ok - packets from eth0 sems to be routed.
Only they "somehow" skip all PREROUTING chains.. But from sources
I can find no way how only eth0 pkts could skip PREROUTING but still
be routed and contracked ... Anyone has a clue ?

A didn't more investigation as I had to reboot it - it always helps.

thanks, Martin
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/