Re: [PATCH] MASQUERADE not flushing conntracks on ip change

[Phil Oester <kernel@linuxace.com>]

On Thu, Nov 04, 2004 at 11:36:58PM +0100, Patrick McHardy wrote:
> The problem is the opposite, living conntracks are killed
> when more than one IP address is added to the interface.
> 
> Phil mentioned Router/switch/dslmodem/cablemodem power cycles.
> Contrary to what I said earlier, I don't see what value this
> optimization might have. Router/switch powercycle doesn't matter
> The optimization doesn't work for dslmodems (ppp devices), with
> cablemodems you don't loose your IP, except in the very unlucky
> situation that your DHCP lease times out while you are disconnected
> and you get a different one afterwards.

My dsl modem attaches to my pc via ethernet cable.  If I powercycle
the modem, ethx up/down, conntracks get lost.  Same goes for cablemodems.

Unconditionally flushing conntracks on dev down still doesn't seem
the right behaviour.  But I agree Patrick that the ip address add case
is problematic.

I'm investigating another possible solution at the moment...

Phil