netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* nf_nat_tftp broken in 4.8?
@ 2016-11-09 20:40 Florian Fainelli
  2016-11-09 21:56 ` Florian Westphal
  0 siblings, 1 reply; 3+ messages in thread
From: Florian Fainelli @ 2016-11-09 20:40 UTC (permalink / raw)
  To: netdev, netfilter-devel, fgao; +Cc: pablo

[-- Attachment #1: Type: text/plain, Size: 684 bytes --]

Hi,

After updating my workstation from 4.4 to 4.8, which also serves as a
NAT gateway for local machines, I noticed that TFTP across this NAT box
broke:

- TFTP read request to the server, source port 3534
- server replies with a data packet to dst port 3534
- gateway sends an ICMP destination unreachable with port unreachable
along with the UDP data packet

I am currently bisecting this, but it is taking a lot longer to build
than I thought. Attached is the non-working case PCAP file for you to
look at.

There has not been a lot happening for net/netfilter/*tftp* between v4.4
and 4.8, so can you think about something in particular that could cause
that?

Thanks!
--
Florian

[-- Attachment #2: tftp-4.8pcapng.pcapng.gz --]
[-- Type: application/gzip, Size: 1269 bytes --]

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: nf_nat_tftp broken in 4.8?
  2016-11-09 20:40 nf_nat_tftp broken in 4.8? Florian Fainelli
@ 2016-11-09 21:56 ` Florian Westphal
  2016-11-09 22:18   ` Florian Fainelli
  0 siblings, 1 reply; 3+ messages in thread
From: Florian Westphal @ 2016-11-09 21:56 UTC (permalink / raw)
  To: Florian Fainelli; +Cc: netdev, netfilter-devel, fgao, pablo

Florian Fainelli <f.fainelli@gmail.com> wrote:
> After updating my workstation from 4.4 to 4.8, which also serves as a
> NAT gateway for local machines, I noticed that TFTP across this NAT box
> broke:

does 'sysctl net.netfilter.nf_conntrack_helper=1' help?

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: nf_nat_tftp broken in 4.8?
  2016-11-09 21:56 ` Florian Westphal
@ 2016-11-09 22:18   ` Florian Fainelli
  0 siblings, 0 replies; 3+ messages in thread
From: Florian Fainelli @ 2016-11-09 22:18 UTC (permalink / raw)
  To: Florian Westphal; +Cc: netdev, netfilter-devel, fgao, pablo

On 11/09/2016 01:56 PM, Florian Westphal wrote:
> Florian Fainelli <f.fainelli@gmail.com> wrote:
>> After updating my workstation from 4.4 to 4.8, which also serves as a
>> NAT gateway for local machines, I noticed that TFTP across this NAT box
>> broke:
> 
> does 'sysctl net.netfilter.nf_conntrack_helper=1' help?
> 

It does yes, thanks, and apologies for not seeing that earlier.
-- 
Florian

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2016-11-09 22:18 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2016-11-09 20:40 nf_nat_tftp broken in 4.8? Florian Fainelli
2016-11-09 21:56 ` Florian Westphal
2016-11-09 22:18   ` Florian Fainelli

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).