RE: Small problem -> Prerouting

["Dharmendra.T" <dharmu@nsecure.net>]

[-- Attachment #1: Type: text/plain, Size: 1461 bytes --]

On Wed, 2003-04-16 at 18:17, Matti Luoma wrote:

    
                        Seems to be in use, so i cant remove it, so it
    has to be something else...
     
                        What module does PREROUTING need anyways?
     

         
        On Wed, 2003-04-16 at 17:41, Matti Luoma wrote: 

            Hiya!
            
            Well i upgraded my kernel to 2.4.20 from 2.4.3, and also compiled newest 
            iptables 1.2.8
            
            now i got this weird problem with
            
            example this line:
            
            iptables -A PREROUTING -t nat -p UDP -d IP -dport port -j DNAT --to IP:Port
            
            It should works, and it works, but not anymore, SSH forwarding like this 
            works thou
            
            also im gettin some stuff in syslog:
            
            kernel: NAT: 0 dropping untracked packet c66ab6c0
            
            i think these things are related, and probably some module is causing this, 
            any ideas?
            
            Cheers,
            Matti
            
            I guess this is because of conntrack module. Just check do you need this if not remove it. 


Do onething, recompile the kernel and enable only the modules which you
want to use. 
I guess PREROUTING does not use any external module. If iptables is
enabled PREROUTING will be enabled.

Regards
Dharmu

[-- Attachment #2: Type: text/html, Size: 3620 bytes --]