From: Nagy Zoltan <kirk@elte.hu>
To: netfilter-devel@lists.netfilter.org
Subject: ipt_NOTRACK - icmp redirect problem
Date: Sat, 21 May 2005 06:48:12 +0159 [thread overview]
Message-ID: <428EBDA2.10003@elte.hu> (raw)
hi
i've encountered a problem with NOTRACK, if a packet which isn't tracked emits an icmp-redirect,
it appears on lo instead of the in device, and messages appear from kernel like:
Redirect from 192.168.245.100 on lo about 172.16.92.1 ignored.
Advised path = 0.0.0.0 -> 0.0.0.0, tos 00
ip r f t tx_in
ip r f t tx_out
#ip r f t local
ip l s eth1 up
ip l s eth2 up
ip a f dev eth1
ip a f dev eth2
ip a a 0.0.0.0 dev eth1
#ip a a 192.168.11.100/24 dev eth1
#ip a a 192.168.34.100/24 dev eth2
ip r a 172.16.92.0/24 dev eth1
ip r a 192.168.11.0/24 dev eth1
#ip r a 172.16.92.0/24 dev eth1
#ip r a 192.168.11.0/24 dev eth1
ip ru add iif eth1 table tx_in
ip ru add iif eth2 table tx_out
ip r a 172.16.92.0/24 dev eth1 t tx_in
ip r a 192.168.11.0/24 dev eth1 t tx_in
#ip r a default via 192.168.34.1 dev eth2 t tx_in
iptables -t raw -F
iptables -t raw -A PREROUTING -p icmp -j NOTRACK
#ip r a
echo 1 >/proc/sys/net/ipv4/ip_forward
echo 1 > /proc/sys/net/ipv4/conf/all/log_martians
reply other threads:[~2005-05-21 4:49 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=428EBDA2.10003@elte.hu \
--to=kirk@elte.hu \
--cc=netfilter-devel@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.