All of lore.kernel.org
 help / color / mirror / Atom feed
From: Harald Welte <laforge@netfilter.org>
To: Matt Domsch <matt@domsch.com>
Cc: netfilter@lists.netfilter.org
Subject: Re: ip_nat_pptp ICMP rejected failures
Date: Wed, 5 Oct 2005 17:44:53 +0200	[thread overview]
Message-ID: <20051005154453.GC4184@rama> (raw)
In-Reply-To: <20051005151309.GA28129@domsch.com>

[-- Attachment #1: Type: text/plain, Size: 956 bytes --]

On Wed, Oct 05, 2005 at 10:13:09AM -0500, Matt Domsch wrote:
> Harald, thanks much for your efforts on the ip_nat_pptp helper.  I've
> been using a 2.2 kernel on my firewall for years simply because it had
> this functionality.

there have been patches for lots of 2.4 and 2.6 releases, though.

thanks for the detailed bugreport, I'll try to analyze the problem once
I'm back from http://workshop.netfilter.org/

Please try to explicitly add a drop rule for the ICMP packets and see
whether it works then.  Sounds strange, but I have my reasons for asking
;)

Thanks

-- 
- Harald Welte <laforge@netfilter.org>                 http://netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

  reply	other threads:[~2005-10-05 15:44 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-10-05 15:13 ip_nat_pptp ICMP rejected failures Matt Domsch
2005-10-05 15:44 ` Harald Welte [this message]
2005-10-06  3:54   ` Matt Domsch
2005-10-08  5:05     ` Matt Domsch

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20051005154453.GC4184@rama \
    --to=laforge@netfilter.org \
    --cc=matt@domsch.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.