Re: netfilter regression causes lost pings "operation not permitted"

[Trevor Cordes]

On 2016-12-07 Trevor Cordes wrote:
> Bisected down to:
> 870190a9ec9075205c0fa795a09fa931694a3ff1
> 7c9664351980aaa6a4b8837a314360b3a4ad382a

Oh!  I forgot to mention the most important point: iptable_nat module
MUST be loaded for the bug to show up!

modprobe iptable_nat

If you rmmod it, the bug goes away.  Interestingly, the bug occurs even
if you have every iptables table (including -t nat) completely empty
(no rules).  All that is required is iptable_nat simply to be loaded.