From mboxrd@z Thu Jan 1 00:00:00 1970 From: Patrick McHardy Subject: Re: 2.6.13-mm2 Date: Sun, 11 Sep 2005 03:03:21 +0200 Message-ID: <43238259.505@trash.net> References: <20050908053042.6e05882f.akpm@osdl.org> <1126396015l.6300l.1l@werewolf.able.es> <20050910165659.5eea90d0.akpm@osdl.org> <4323753D.9030007@trash.net> <1126399776l.6300l.2l@werewolf.able.es> <1126400288l.6300l.3l@werewolf.able.es> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="------------080006010201020805040502" Cc: Linux-Kernel Lista , Andrew Morton , netdev@vger.kernel.org Return-path: To: "J.A. Magallon" In-Reply-To: <1126400288l.6300l.3l@werewolf.able.es> Sender: linux-kernel-owner@vger.kernel.org List-Id: netdev.vger.kernel.org This is a multi-part message in MIME format. --------------080006010201020805040502 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit J.A. Magallon wrote: > And I also get this on syslog: > > Sep 11 02:56:58 werewolf kernel: MASQUERADE: eth0 ate my IP address > Sep 11 02:56:58 werewolf kernel: MASQUERADE: eth0 ate my IP address Thanks, I'm pretty sure its caused by this patch. The problem is that pump uses a regular UDP socket (some other dhcp clients use AF_PACKET sockets), and packet sent by it are also handled by iptables. The MASQUERADE rule can't find a local IP address and drops the packet. I'm not sure how to fix it yet, reverting the patch is not a good option. --------------080006010201020805040502 Content-Type: text/plain; name="x" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="x" [NETFILTER]: Don't exclude local packets from MASQUERADING Increases consistency in source-address selection. Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller --- commit 9baa5c67ff4ce57b6b9f68c90714a1bb876fccd7 tree 27f2c48e12e1bb5e3e6d5f8320651c213892ed20 parent fb13ab2849074244a51ae5147483610529a29ced author Patrick McHardy Sun, 14 Aug 2005 17:32:50 -0700 committer David S. Miller Mon, 29 Aug 2005 15:58:36 -0700 net/ipv4/netfilter/ipt_MASQUERADE.c | 5 ----- 1 files changed, 0 insertions(+), 5 deletions(-) diff --git a/net/ipv4/netfilter/ipt_MASQUERADE.c b/net/ipv4/netfilter/ipt_MASQUERADE.c --- a/net/ipv4/netfilter/ipt_MASQUERADE.c +++ b/net/ipv4/netfilter/ipt_MASQUERADE.c @@ -86,11 +86,6 @@ masquerade_target(struct sk_buff **pskb, IP_NF_ASSERT(hooknum == NF_IP_POST_ROUTING); - /* FIXME: For the moment, don't do local packets, breaks - testsuite for 2.3.49 --RR */ - if ((*pskb)->sk) - return NF_ACCEPT; - ct = ip_conntrack_get(*pskb, &ctinfo); IP_NF_ASSERT(ct && (ctinfo == IP_CT_NEW || ctinfo == IP_CT_RELATED || ctinfo == IP_CT_RELATED + IP_CT_IS_REPLY)); --------------080006010201020805040502--