From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Matti Luoma" Subject: RE: Small problem -> Prerouting Date: Wed, 16 Apr 2003 15:47:35 +0300 Sender: netfilter-admin@lists.netfilter.org Message-ID: References: <1050496812.1001.2.camel@india> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0026_01C3042F.7FF3E450" Return-path: In-reply-to: <1050496812.1001.2.camel@india> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: "Dharmendra.T" Cc: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_0026_01C3042F.7FF3E450 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Seems to be in use, so i cant remove it, so it has = to be something else... What module does PREROUTING need anyways? On Wed, 2003-04-16 at 17:41, Matti Luoma wrote:=20 Hiya! Well i upgraded my kernel to 2.4.20 from 2.4.3, and also compiled newest = iptables 1.2.8 now i got this weird problem with example this line: iptables -A PREROUTING -t nat -p UDP -d IP -dport port -j DNAT --to = IP:Port It should works, and it works, but not anymore, SSH forwarding like this = works thou also im gettin some stuff in syslog: kernel: NAT: 0 dropping untracked packet c66ab6c0 i think these things are related, and probably some module is causing = this,=20 any ideas? Cheers, Matti I guess this is because of conntrack module. Just check do you need this = if not remove it. --=20 Regards Dharmendra.T This message is intended for the addressee only. It may contain = privileged or Confidential information. If you have received this = message in error,please notify the sender and destroy the message = immediately.Unauthorised use or reproduction of this message is strictly = prohibited.=20 ------=_NextPart_000_0026_01C3042F.7FF3E450 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable =EF=BB=BF
       &nbs= p;           =20 Seems to be in use, so i cant remove it, so it has to be something=20 else...
 
       &nbs= p;            = ;What=20 module does PREROUTING need anyways?
 

 
On Wed, 2003-04-16 at 17:41, = Matti Luoma=20 wrote:=20 
Hiya!

Well i upgraded my kernel to =
2.4.20 from 2.4.3, and also compiled newest 
iptables 1.2.8

now i got this weird problem =
with

example this =
line:

iptables -A PREROUTING -t nat -p =
UDP -d IP -dport port -j DNAT --to IP:Port

It should works, and it works, =
but not anymore, SSH forwarding like this 
works thou

also im gettin some stuff in =
syslog:

kernel: NAT: 0 dropping =
untracked packet c66ab6c0

i think these things are =
related, and probably some module is causing this, 
any ideas?

Cheers,
Matti

I guess this is because of conntrack module. Just check =
do you need this if not remove it. 
--=20
Regards
Dharmendra.T


This message is intended for the addressee only. It may contain =
privileged or Confidential information. If you have received this =
message in error,please notify the sender and destroy the message =
immediately.Unauthorised use or reproduction of this message is strictly =
prohibited.
------=_NextPart_000_0026_01C3042F.7FF3E450--