From: Patrick McHardy <kaber@trash.net>
To: Wilmer van der Gaast <lintux@lintux.cx>
Cc: linux-kernel@vger.kernel.org,
Netfilter Development Mailinglist
<netfilter-devel@lists.netfilter.org>
Subject: Re: 2.4.23 masquerading broken?
Date: Tue, 02 Dec 2003 18:25:22 +0100 [thread overview]
Message-ID: <3FCCCB02.5070203@trash.net> (raw)
In-Reply-To: <20031202165653.GJ615@gaast.net>
Wilmer van der Gaast wrote:
>For security reasons, I upgraded to 2.4.23 last night. Now, suddenly, IP
>masquerading seems to be broken. When I use SNAT instead of
>masquerading, everything works.
>
>Unfortunately, I think it's hard to reproduce the problem. Right after
>booting .23 for the first time, everything seemed to be okay. The
>problems started just an hour ago, after having the server running for
>fifteen hours without any problems.
>
>Unfortunately there's not much more information I can provide. I can
>attach my iptables/rule/route file and keep my machine running in case
>anyone needs/wants more information. For now I'll just stick with SNAT.
>It works good enough for me.
>
>
Can you check the ringbuffer for error messages ? What happens
to the packets when masquerading fails ?
Best regards,
Patrick
next prev parent reply other threads:[~2003-12-02 17:25 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-12-02 16:56 2.4.23 masquerading broken? Wilmer van der Gaast
2003-12-02 17:25 ` Patrick McHardy [this message]
2003-12-02 17:33 ` Wilmer van der Gaast
2003-12-02 20:18 ` snpe
2003-12-02 23:32 ` Patrick McHardy
2003-12-03 0:45 ` Wilmer van der Gaast
2004-01-10 21:59 ` Harald Welte
2004-01-11 10:40 ` Patrick McHardy
2004-01-11 12:08 ` Patrick McHardy
2003-12-03 10:30 ` 2.4.23 masquerading broken? key.oif = 0; perhaps in bad position ? Zoran Davidovac
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3FCCCB02.5070203@trash.net \
--to=kaber@trash.net \
--cc=lintux@lintux.cx \
--cc=linux-kernel@vger.kernel.org \
--cc=netfilter-devel@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.