From: Les Mikesell <les@futuresource.com>
To: Michael <jlpnetworx@gmail.com>
Cc: netfilter@lists.netfilter.org
Subject: Re: masquerading won't flush conntrack cache
Date: Thu, 14 Oct 2004 11:07:53 -0500 [thread overview]
Message-ID: <1097770072.7688.20.camel@moola.futuresource.com> (raw)
In-Reply-To: <661ba8be041014081326ebea75@mail.gmail.com>
On Thu, 2004-10-14 at 10:13, Michael wrote:
> My solution for the moment (which is not really a solution), is to
> flush all iptable rules and unload all netfilter modules in ip-up,
> when the interface goes up again with the new ip-address. However,
> this also flushes all other rules, which were not affected by the
> external interface (e.g. from eth0 to eth1 or so) and therefore all
> state information is lost.
I can fix my particular situation with this approach because the
'correct' route is through a VPN tunnel that normally stays up
once it is established, but this seems like a fairly serious bug
in terms of general purpose routing since you should be able to
change routes on the fly and have the new route work without disrupting
other connections.
---
Les Mikesell
les@futuresource.com
prev parent reply other threads:[~2004-10-14 16:07 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-10-14 13:17 masquerading won't flush conntrack cache Michael Hecker
2004-10-14 14:50 ` Les Mikesell
2004-10-14 15:13 ` Michael
2004-10-14 16:07 ` Les Mikesell [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1097770072.7688.20.camel@moola.futuresource.com \
--to=les@futuresource.com \
--cc=jlpnetworx@gmail.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.