* Re: PPTP connection tracker
[not found] ` <200307251959.28157.jjackson@vortech.net>
@ 2003-07-26 16:37 ` Harald Welte
0 siblings, 0 replies; 2+ messages in thread
From: Harald Welte @ 2003-07-26 16:37 UTC (permalink / raw)
To: Joshua Jackson; +Cc: Netfilter Development Mailinglist
[-- Attachment #1: Type: text/plain, Size: 3584 bytes --]
On Fri, Jul 25, 2003 at 07:59:28PM -0400, Joshua Jackson wrote:
> While I can sympathize with the "it must be your problem" response,
> you didn't actually answer the question...
I did not mean to imply that it is your problem. I was meaning: Please
provide me with more information so I can debug it.
> I was just curious if you had any feedback about it not working and if
> it was a known problem with the Jan 07 POM. If ANYONE has gotten it
> working, then I would know that it was something I needed to debug
> myself. I have a whole lot of other patches, many of which are network
> related, that go into the Wolverine kernel and just want to confirm
> wether the module is known to work or not.
Astaro Inc. (http://www.astaro.com/) is shipping the code in
patch-o-matic CVS to thousands of customers. Only very occasionally, I
get problem reports.
> -The server version is Wolverine v1.1 from http://www.coyotelinux.com.
So it's poptop.
> -Nobody has submitted a log/conntrack output to me as the solution most of
> them took was to simply unload the PPTP connection tracker so they could at
> least get a single connection
> If the POM code is known to work, I will probably work a little more at
> debugging it, otherwise I will focus on the CVS code. If all else fails will
> try to round up some log/packet dumps to send you. This is a commercial
> product and getting customers to modify and bring down production firewalls
> is roughly equivalent to asking them to pull out a tooth and send it to me.
To be honest, I don't remember about the bugs/status/issues of the
version contained in a version from more than six months ago.
Well, if you cannot reproduce yourself it in some known setup/scenario, I doubt
I can start reproducing it at my site.
> > - probably also packet dumps/traces (tcpdump, ethereal) needed.
>
> tcpdump, maybe... it is an embedded application that is typically installed
> onto small flash drives - not a whole lot of flexibility for utility
> installations and space for packet dumps. If need be I'll see if I can find
> someone with it installed in a hard drive that is having the problems.
I'm sorry, but you sound a bit like a customer who has bought a certain
product with guaranteed features that are now not fullfilled. Please be
aware there is a reason the code in patch-o-matic is in the 'extra'
repository, marked as status 'Beta' and still receives updates.
> As for the CVS POM, the web interface lists the pptp-conntrack stuff as
> predating the 01/07 release,
Where did you get that information from?
http://cvs.netfilter.org/netfilter/patch-o-matic/extra/pptp-conntrack-nat.patch
lists the changelog, and clearly indicates that pom-20030107 contains
version 1.11, whereas CVS contains version 1.12
> grabbed the /netfilter-extensions/helpers/pptp/ stuff and manually wedged it
> into 2.4.21, but can not push that out to production customers until I have
> done enough testing to be certain I didn't break anything else in the
> netfilter code during the process.
sure. But in order to know if your particular bug/problem was solved,
you would need a known-to-fail-with-the-old-code setup against which you
can verify.
> Joshua Jackson
> Vortech Consulting
> http://www.vortech.net
--
- Harald Welte <laforge@gnumonks.org> http://www.gnumonks.org/
============================================================================
Programming is like sex: One mistake and you have to support it your lifetime
[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]
^ permalink raw reply [flat|nested] 2+ messages in thread