From mboxrd@z Thu Jan 1 00:00:00 1970 From: Patrick McHardy Subject: Re: 2.6.16-rc1-mm3 XFRM+NAT issue Date: Mon, 30 Jan 2006 00:26:41 +0100 Message-ID: <43DD4F31.8030807@trash.net> References: <1138563710.26998.22.camel@leto.intern.saout.de> <43DD1E3E.70503@trash.net> <1138568354.21229.1.camel@leto.intern.saout.de> <43DD3E3D.5070201@trash.net> <1138573848.28464.1.camel@leto.intern.saout.de> <43DD48CC.9070709@trash.net> <1138577096.28609.13.camel@leto.intern.saout.de> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: netfilter-devel@lists.netfilter.org, Herbert Xu Return-path: To: Christophe Saout In-Reply-To: <1138577096.28609.13.camel@leto.intern.saout.de> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org Christophe Saout wrote: > Am Sonntag, den 29.01.2006, 23:59 +0100 schrieb Patrick McHardy: > > >>Found it, the packet doesn't have its dst_entry released after DNAT in >>PRE_ROUTING because of an incorrect check and is delivered locally. >>This patch should fix it. > > > Ha! You got it. Nice. > > Looks like I can finally move on trying to upgrade my kernel... Actually it seems I got confused, the check looks right. Can you post the output of /proc/net/ip_conntrack for this connection please?