From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jiri Olsa Subject: Re: no reassembly for outgoing packets on RAW socket Date: Thu, 10 Jun 2010 08:57:02 +0200 Message-ID: <20100610065702.GB1915@jolsa.lab.eng.brq.redhat.com> References: <20100604112708.GA1958@jolsa.lab.eng.brq.redhat.com> <4C08EB85.3050900@trash.net> <20100607145558.GA1939@jolsa.lab.eng.brq.redhat.com> <4C0FA24A.7060907@trash.net> <4C0FB068.9090700@trash.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: Patrick McHardy , netdev@vger.kernel.org, Netfilter Developer Mailing List To: Jan Engelhardt Return-path: Received: from mx1.redhat.com ([209.132.183.28]:1282 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752324Ab0FJG5I (ORCPT ); Thu, 10 Jun 2010 02:57:08 -0400 Content-Disposition: inline In-Reply-To: Sender: netfilter-devel-owner@vger.kernel.org List-ID: On Wed, Jun 09, 2010 at 05:20:37PM +0200, Jan Engelhardt wrote: > > On Wednesday 2010-06-09 17:16, Patrick McHardy wrote: > >Jan Engelhardt wrote: > >> On Wednesday 2010-06-09 16:16, Patrick McHardy wrote: > >>>>> You could use the NOTRACK target to bypass connection tracking. > >>>>> > >>>> I tried the NOTRACK target, but the packet is still going > >>>> throught reassembly, because the RAW filter has lower priority > >>>> then the connection track defragmentation.. > >>> > >>> Right. > >> > >> Blech. That reminds me of > >> http://marc.info/?l=netfilter-devel&m=126581823826735&w=2 > > > >We already fixed that. > > I know, and I posted it for the understanding of the OP > as to why RAW is after DEFRAG. thanks, it's helpful jirka