Re: kernel crash in nf_nat_move_storage

[Patrick McHardy <kaber@trash.net>]

Thomas Woerner wrote:
> Hello,
> 
> Using port forwarding from port 80 to 21 with nf_conntrack_ftp loaded 
> results in a kernel crash, when connecting to port 80 from a remote
> host. This seems to be a problem for kernels > 2.6.18 including 2.6.24.
> 
> Steps to Reproduce:
> 
> host1> iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j DNAT 
> --to :21
> host1> iptables -t filter -A INPUT -i eth0 -m state --state NEW -m tcp 
> -p tcp --dport 21 -j ACCEPT
> host1> modprobe ip_conntrack_ftp
> host2> telnet host1 80
> 
> Attached is the kernel crash log for kernel 2.6.23.9-85.fc8PAE. I was 
> told that this kernel crash dump is incomplete, but it took several 
> attempts to get a log with more that 5 lines over serial console. The 
> kernel seems to die too fast.


This is already fixed in 2.6.23.10.