From: Sam Roberts <vieuxtech@gmail.com>
To: Pablo Neira Ayuso <pablo@netfilter.org>,
Netfilter Developer Mailing List
<netfilter-devel@vger.kernel.org>
Subject: Re: fix for userspace expectations
Date: Tue, 12 Apr 2011 09:59:52 -0700 [thread overview]
Message-ID: <BANLkTinVysqxicSa9mF1BTieCrJxyv-rUg@mail.gmail.com> (raw)
In-Reply-To: <4DA40CD6.9030501@netfilter.org>
On Tue, Apr 12, 2011 at 1:27 AM, Pablo Neira Ayuso <pablo@netfilter.org> wrote:
> The main change is the following: You have to use the iptables CT target
> with the option --userspace-helper in the raw table of prerouting.
Patches to the iptables man page would be helpful.
Your example passes all traffic through the CT target.
Is that necessary? Can I match just tcp packets on the ports used by
the protocol who's connections are being tracked? Can the CT target be
used in the filter table?
>> Can you suggest a reliable way to reproduce the crash? I only saw it
Can you suggest a reliable way to reproduce the crash?
>> once, and have no way to reproduce reliably, so no way to assure you
>> the patch fixes the problem, I can only tell you if my code continues
>> to work correctly.
>
> I sent an email to describe the problem to the ML. Every expectation
Perhaps this was private email with some other netfilter devs? I can't
find it in the archives:
http://marc.info/?l=netfilter-devel&w=2&r=1&s=pablo&q=b
Cheers,
Sam
prev parent reply other threads:[~2011-04-12 16:59 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <AANLkTi=17VZ6Sjgj57LTa-xcJj00BSjv_-4DveiutNo1@mail.gmail.com>
2011-03-28 12:47 ` ctnetlink kernel dump while running multiple libnfct clients Pablo Neira Ayuso
2011-03-28 16:01 ` Sam Roberts
2011-03-29 10:12 ` Pablo Neira Ayuso
[not found] ` <AANLkTi=XfknKE9RkiohtW4+xzpAe2CGY1JDg7_JtfSUG@mail.gmail.com>
[not found] ` <4D925614.2000909@netfilter.org>
2011-03-29 22:44 ` Sam Roberts
2011-03-29 23:11 ` Pablo Neira Ayuso
[not found] ` <4DA1986A.4080305@netfilter.org>
[not found] ` <BANLkTinjb2yhAQo4Zqs1hMgcBCH1caM0yQ@mail.gmail.com>
[not found] ` <4DA40CD6.9030501@netfilter.org>
2011-04-12 16:59 ` Sam Roberts [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=BANLkTinVysqxicSa9mF1BTieCrJxyv-rUg@mail.gmail.com \
--to=vieuxtech@gmail.com \
--cc=netfilter-devel@vger.kernel.org \
--cc=pablo@netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).