From: Stephen Hemminger <stephen@networkplumber.org>
To: netdev@vger.kernel.org
Subject: Fw: [Bug 202287] New: netfilter/iptales prevents Tor Browser from closing cleanly
Date: Tue, 15 Jan 2019 11:27:32 -0800 [thread overview]
Message-ID: <20190115112732.2f39747d@shemminger-XPS-13-9360> (raw)
Begin forwarded message:
Date: Tue, 15 Jan 2019 16:18:13 +0000
From: bugzilla-daemon@bugzilla.kernel.org
To: stephen@networkplumber.org
Subject: [Bug 202287] New: netfilter/iptales prevents Tor Browser from closing cleanly
https://bugzilla.kernel.org/show_bug.cgi?id=202287
Bug ID: 202287
Summary: netfilter/iptales prevents Tor Browser from closing
cleanly
Product: Networking
Version: 2.5
Kernel Version: 4.20
Hardware: Intel
OS: Linux
Tree: Mainline
Status: NEW
Severity: high
Priority: P1
Component: IPV4
Assignee: stephen@networkplumber.org
Reporter: jb.1234abcd@gmail.com
Regression: No
Created attachment 280501
--> https://bugzilla.kernel.org/attachment.cgi?id=280501&action=edit
Tpr Browser and kernels run log
Since kernel 4.20 there is a problem with Tor Browser (TB) on close.
The last good kernel was 4.19.12 .
Tested:
kernel 4.20.1 and 4.19.12 .
Tor Browser 8.0.4 (prod version).
Tor Browser (TB) and kernel run logs (as attached):
tor-netfilter-4.20.1-and-4.19.12.txt
kernel 4.20.1
Results:
There is a problem with TB on close:
- TB process left behind
- INVALID messages (ACK FIN and ACK PSH FIN) cought in OUTPUT chain of
iptables,
on lo interface, and logged to system log/journal.
-A OUTPUT -m conntrack --ctstate INVALID -j loginv
kernel 4.19.12
Results:
There is no problem with TB, i.e. clean close.
There is an old reference to this problem
https://www.linode.com/community/questions/2495/iptables-drop-ackfin-as-invalid
--
You are receiving this mail because:
You are the assignee for the bug.
next reply other threads:[~2019-01-15 19:27 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-01-15 19:27 Stephen Hemminger [this message]
2019-01-16 14:37 ` Fw: [Bug 202287] New: netfilter/iptales prevents Tor Browser from closing cleanly Florian Westphal
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20190115112732.2f39747d@shemminger-XPS-13-9360 \
--to=stephen@networkplumber.org \
--cc=netdev@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox