From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andrew Morton Subject: Re: [Bugme-new] [Bug 9812] New: Kernel does not deliver packets going through the INPUT chain even if the app is listening on IN_ADDR_ANY Date: Fri, 25 Jan 2008 05:14:04 -0800 Message-ID: <20080125051404.3bbefab3.akpm@linux-foundation.org> References: Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: bugme-daemon@bugzilla.kernel.org, pawel@rogocz.com To: netdev@vger.kernel.org Return-path: Received: from smtp2.linux-foundation.org ([207.189.120.14]:57184 "EHLO smtp2.linux-foundation.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753539AbYAYNOL (ORCPT ); Fri, 25 Jan 2008 08:14:11 -0500 In-Reply-To: Sender: netdev-owner@vger.kernel.org List-ID: > On Fri, 25 Jan 2008 03:59:27 -0800 (PST) bugme-daemon@bugzilla.kernel.org wrote: > http://bugzilla.kernel.org/show_bug.cgi?id=9812 > > Summary: Kernel does not deliver packets going through the INPUT > chain even if the app is listening on IN_ADDR_ANY > Product: Networking > Version: 2.5 > KernelVersion: 2.6.22-14 > Platform: All > OS/Version: Linux > Tree: Mainline > Status: NEW > Severity: normal > Priority: P1 > Component: Netfilter/Iptables > AssignedTo: networking_netfilter-iptables@kernel-bugs.osdl.org > ReportedBy: pawel@rogocz.com > > > Latest working kernel version: never worked > Earliest failing kernel version: > Distribution: ubuntu 7.10 > > Problem Description: > > I have a farm of web servers behind a load balancer in DSR mode. > I would like to be able to dump packets with any IP address on the web servers > through the load balancer and have web servers reply to these requests. > Currently for every IP web servers are supposed to reply to, I have to > configure the IP on all servers on their loopback interfaces. The web server > listens on IN_ADDR_ANY and I am forcing packets into the INPUT chain via > iptables/netfilter but the kernel never replies to any connection requests. I > only see the counter for OutNoRoutes increasing. > > Steps to reproduce: > > web server: > > #iptables -A PREROUTING -i eth0 -t mangle -p tcp --dport 80 -j MARK --set-mark > 1 > #ip route add to local default dev lo protocol kernel table 1 > #ip rule add fwmark 1 table 1 priority 1 > > client: > > #ip route add 1.1.1.1/32 via dev eth0 > > while making requests to 1.1.1.1:80 from the client you can see increasing > OutNoRoutes counter but no connection ever takes place. > >