From: Pascal Hambourg <pascal@plouf.fr.eu.org>
To: Scott Bronson <bronson@rinspin.com>
Cc: Pablo Neira Ayuso <pablo@netfilter.org>,
netfilter <netfilter@vger.kernel.org>
Subject: Re: Packet disappears after DNAT?
Date: Sat, 19 Dec 2015 17:34:56 +0100 [thread overview]
Message-ID: <56758730.4020901@plouf.fr.eu.org> (raw)
In-Reply-To: <CAKmUPx4xc3nAzXsgCH+EPxC218V5FUhvR4nCCcDCEVRqbMUPwQ@mail.gmail.com>
Scott Bronson a écrit :
> On Tue, Dec 15, 2015 at 5:06 AM, Pablo Neira Ayuso <pablo@netfilter.org> wrote:
>>
>> JFYI: The br-nf thing was moved to a separated module since 3.18. So
>> now this finally requires explicit modprobing.
>
> Thanks Pablo. Is this the right logic to use for all kernels?
>
> - if /proc/sys/net/bridge/bridge-nf-call-iptables doesn't exist
> - modprobe br_netfilter
> - echo 0 > /proc/sys/net/bridge/bridge-nf-call-iptables
Why load br_netfilter if it is not needed ?
I would do the following :
modprobe bridge
if /proc/sys/net/bridge/bridge-nf-call-iptables exists
echo 0 > /proc/sys/net/bridge/bridge-nf-call-iptables
next prev parent reply other threads:[~2015-12-19 16:34 UTC|newest]
Thread overview: 17+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-12-04 9:43 Packet disappears after DNAT? Scott Bronson
2015-12-04 11:55 ` Anton Danilov
2015-12-04 16:18 ` Scott Bronson
2015-12-06 8:49 ` Anton Danilov
2015-12-07 6:57 ` Scott Bronson
2015-12-05 10:31 ` Pascal Hambourg
2015-12-07 7:07 ` Scott Bronson
2015-12-07 8:01 ` Pascal Hambourg
2015-12-07 8:06 ` Pascal Hambourg
2015-12-15 12:21 ` Scott Bronson
2015-12-15 13:06 ` Pablo Neira Ayuso
2015-12-15 19:49 ` Pascal Hambourg
2015-12-18 0:41 ` Scott Bronson
2015-12-19 16:34 ` Pascal Hambourg [this message]
2015-12-15 19:45 ` Pascal Hambourg
2015-12-18 0:51 ` Scott Bronson
2015-12-19 16:38 ` Pascal Hambourg
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=56758730.4020901@plouf.fr.eu.org \
--to=pascal@plouf.fr.eu.org \
--cc=bronson@rinspin.com \
--cc=netfilter@vger.kernel.org \
--cc=pablo@netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.