From: Patrick McHardy <kaber@trash.net>
To: Kris Op de Beeck <kris.op.de.beeck@newtec.eu>
Cc: Ulrik De Bie <ulrik.debie@newtec.eu>,
netdev@vger.kernel.org,
Netfilter Development Mailinglist
<netfilter-devel@vger.kernel.org>
Subject: Re: DNAT sporadically doesn't replace destination IP address
Date: Mon, 26 May 2008 16:21:59 +0200 [thread overview]
Message-ID: <483AC787.6030902@trash.net> (raw)
In-Reply-To: <4836EDCE.B932.00FE.0@newtec.eu>
Kris Op de Beeck wrote:
>>>> On 22/05/2008 at 18:29, in message <48359F66.50503@trash.net>, Patrick McHardy
> <kaber@trash.net> wrote:
>>
>> I didn't find the reason why your kernel even has that message
>> (didn't try to hard though). Could you rerun the test with a
>> more current kernel, like 2.6.24 or 2.6.25 please?
>
> Upgraded from Ubuntu 7.10 to 8.04
>
> s3p@burnin:~$ uname -a
> Linux burnin 2.6.24-16-generic #1 SMP Thu Apr 10 13:23:42 UTC 2008 i686 GNU/Linux
>
> [ 7651.979390] printk: 8 messages suppressed.
> [ 7651.979395] nf_ct_tcp: invalid packet ignored IN= OUT= SRC=192.168.1.24 DST=10.9.9.23 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=47660 DF PROTO=TCP SPT=42451 DPT=80 SEQ=3352606539 ACK=0 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (020405B40402080A001C104E0000000001030307) UID=1000
> [ 7656.667006] nf_ct_tcp: invalid packet ignored IN= OUT= SRC=192.168.1.15 DST=10.9.9.14 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=59137 DF PROTO=TCP SPT=49734 DPT=80 SEQ=3327322852 ACK=0 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (020405B40402080A001C14E50000000001030307) UID=1000
What does "grep <srcport from above> /proc/net/nf_conntrack" show
when the problem occurs?
> Nothing works now. Can't even ping the modems...
I can't say anything about this without further information.
next prev parent reply other threads:[~2008-05-26 14:22 UTC|newest]
Thread overview: 14+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-05-22 14:33 DNAT sporadically doesn't replace destination IP address Kris Op de Beeck
2008-05-22 14:57 ` Patrick McHardy
2008-05-22 15:22 ` Kris Op de Beeck
2008-05-22 15:28 ` Patrick McHardy
2008-05-22 15:34 ` Kris Op de Beeck
2008-05-22 15:36 ` Patrick McHardy
2008-05-22 16:29 ` Patrick McHardy
2008-05-22 17:45 ` Kris Op de Beeck
2008-05-23 14:16 ` Kris Op de Beeck
2008-05-26 14:21 ` Patrick McHardy [this message]
2008-05-27 14:27 ` Kris Op de Beeck
2008-05-27 14:44 ` Patrick McHardy
2008-05-29 10:12 ` Kris Op de Beeck
-- strict thread matches above, loose matches on Subject: below --
2008-05-26 12:11 Ulrik De Bie
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=483AC787.6030902@trash.net \
--to=kaber@trash.net \
--cc=kris.op.de.beeck@newtec.eu \
--cc=netdev@vger.kernel.org \
--cc=netfilter-devel@vger.kernel.org \
--cc=ulrik.debie@newtec.eu \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.