Re: conntrack doesn't always work when a bridge is used

["Damien Thébault" <damien.thebault@gmail.com>]

2008/1/2 Damien Thébault <damien.thebault@gmail.com>:
> On Dec 30, 2007 6:53 PM, Patrick McHardy <kaber@trash.net> wrote:
> >
> > Thanks. They still show the double POST_ROUTING effects (the retransmitted
> > \0a), but I can't figure out why this would be happening. Please add TRACE
> > rules in both directions for the FTP control traffic and post the output.
> > This will allow to verify that we're indeed dealing with double hook
> > invocations and not some other bug:
> >
> > modprobe ipt_LOG
> > iptables -t raw -A OUTPUT -p tcp --dport 21 -j TRACE
> > iptables -t raw -A OUTPUT -p tcp --sport 21 -j TRACE
> > iptables -t raw -A PREROUTING -p tcp --dport 21 -j TRACE
> > iptables -t raw -A PREROUTING -p tcp --sport 21 -j TRACE
> >
> > Thanks.
> >
>
> I captured those files with "tail -n 0 -f /var/log/messages". The
> first setup (trace1.log) is the "working" one.
>
> Regards.

I tried to use the patch I created earlier (the one adding the hooks
again). I said it worked but it does not everytime.

By the way, Patrick, what do you think about this bug? Maybe I
shouldn't rely on bridges but it's a useful feature sometimes.

Regards.
-- 
Damien Thebault
-
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html