From: Patrick McHardy <kaber@trash.net>
To: Dirk Morris <dmorris@metaloft.com>
Cc: netfilter-devel@lists.netfilter.org
Subject: Re: REDIRECT differences in 2.6.12.2
Date: Sat, 09 Jul 2005 16:52:05 +0200 [thread overview]
Message-ID: <42CFE495.9000904@trash.net> (raw)
In-Reply-To: <42CECAFB.6070709@metaloft.com>
Dirk Morris wrote:
> eve: iptables -t nat -A PREROUTING -p tcp --destination-port 1234 -j
> REDIRECT --to-port 1234
> eve: echo 255 > /proc/sys/net/ipv4/netfilter/ip_conntrack_log_invalid
> eve: nc -p -l 1234
>
> alice: telnet bob 1234
>
> messages on eve (192.168.2.2) shows:
>
> Jul 8 11:47:34 cartman kernel: ip_ct_tcp: invalid packet ignored IN=
> OUT= PHYSIN=eth0 SRC=192.168.2.1 DST=192.168.2.3 LEN=60 TOS=0x10
> PREC=0x00 TTL=64 ID=18927 DF PROTO=TCP SPT=33080 DPT=1234 SEQ=1119072953
> ACK=0 WINDOW=5840 RES=0x00 SYN URGP=0 OPT
> (020405B40402080A18B1070F0000000001030307)
You didn't mention anything about a bridge. Please describe your setup
in full detail. And please use IPs instead of names.
Regards
Patrick
next prev parent reply other threads:[~2005-07-09 14:52 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-07-05 19:10 REDIRECT differences in 2.6.12.2 Dirk Morris
2005-07-08 1:03 ` Patrick McHardy
2005-07-08 18:50 ` Dirk Morris
2005-07-09 14:52 ` Patrick McHardy [this message]
2005-07-11 23:01 ` Dirk Morris
2005-07-12 14:02 ` Patrick McHardy
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=42CFE495.9000904@trash.net \
--to=kaber@trash.net \
--cc=dmorris@metaloft.com \
--cc=netfilter-devel@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.