Re: conntrack doesn't always work when a bridge is used

[Patrick McHardy <kaber@trash.net>]

Damien Thébault wrote:
> On Dec 22, 2007 8:56 AM, Patrick McHardy <kaber@trash.net> wrote:
>> Yes, the captures show the effects from the double POSTROUTING
>> invocation. Could you send me captures from the current net-2.6
>> tree?
>>     
>
> Sure, here they are.
> (I used David Miller's net-2.6.25 at 75fa3253609430f28da005da494ce5ad3b5c78a1 )
>   

Thanks. They still show the double POST_ROUTING effects (the retransmitted
\0a), but I can't figure out why this would be happening. Please add TRACE
rules in both directions for the FTP control traffic and post the output.
This will allow to verify that we're indeed dealing with double hook
invocations and not some other bug:

modprobe ipt_LOG
iptables -t raw -A OUTPUT -p tcp --dport 21 -j TRACE
iptables -t raw -A OUTPUT -p tcp --sport 21 -j TRACE
iptables -t raw -A PREROUTING -p tcp --dport 21 -j TRACE
iptables -t raw -A PREROUTING -p tcp --sport 21 -j TRACE

Thanks.