From: Patrick McHardy <kaber@trash.net>
To: Wilmer van der Gaast <lintux@lintux.cx>
Cc: linux-kernel@vger.kernel.org,
Netfilter Development Mailinglist
<netfilter-devel@lists.netfilter.org>
Subject: Re: 2.4.23 masquerading broken?
Date: Tue, 02 Dec 2003 18:25:22 +0100 [thread overview]
Message-ID: <3FCCCB02.5070203@trash.net> (raw)
In-Reply-To: <20031202165653.GJ615@gaast.net>
Wilmer van der Gaast wrote:
>For security reasons, I upgraded to 2.4.23 last night. Now, suddenly, IP
>masquerading seems to be broken. When I use SNAT instead of
>masquerading, everything works.
>
>Unfortunately, I think it's hard to reproduce the problem. Right after
>booting .23 for the first time, everything seemed to be okay. The
>problems started just an hour ago, after having the server running for
>fifteen hours without any problems.
>
>Unfortunately there's not much more information I can provide. I can
>attach my iptables/rule/route file and keep my machine running in case
>anyone needs/wants more information. For now I'll just stick with SNAT.
>It works good enough for me.
>
>
Can you check the ringbuffer for error messages ? What happens
to the packets when masquerading fails ?
Best regards,
Patrick
next prev parent reply other threads:[~2003-12-02 17:24 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-12-02 16:56 2.4.23 masquerading broken? Wilmer van der Gaast
2003-12-02 17:25 ` Patrick McHardy [this message]
2003-12-02 17:33 ` Wilmer van der Gaast
2003-12-02 20:18 ` snpe
2003-12-02 23:32 ` Patrick McHardy
2003-12-03 0:45 ` Wilmer van der Gaast
2004-01-10 21:59 ` Harald Welte
2004-01-11 10:40 ` Patrick McHardy
2004-01-11 12:08 ` Patrick McHardy
2003-12-03 10:30 ` 2.4.23 masquerading broken? key.oif = 0; perhaps in bad position ? Zoran Davidovac
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3FCCCB02.5070203@trash.net \
--to=kaber@trash.net \
--cc=lintux@lintux.cx \
--cc=linux-kernel@vger.kernel.org \
--cc=netfilter-devel@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox