From: "Daniel Wittenberg" <daniel-wittenberg@starken.com>
To: netfilter@lists.netfilter.org
Subject: Re: state table not working
Date: Fri, 18 Jun 2004 15:16:31 -0500 [thread overview]
Message-ID: <1087589791.40d34d9f4907f@securemail.starken.com> (raw)
In-Reply-To: <Pine.LNX.4.33.0406182201160.25898-100000@blackhole.kfki.hu>
tcpdump I won't be able to get until it fails again, but it's
2.4.22-1.2188.nptl (did it with kernel-2.4.22-1.2174.nptl too).
The full ruleset is almost 200 lines, and will take awhile for me to sanitize
it, but will work on it (not a static script, dynamically generated).
# lsmod
Module Size Used by Not tainted
iptable_filter 2444 1 (autoclean)
ipt_state 1080 8
ipt_REJECT 4248 2
ipt_REDIRECT 1400 0 (unused)
ipt_MASQUERADE 2200 2
ipt_mark 984 0 (unused)
ipt_LOG 4248 62
ipt_limit 1560 28
ip_nat_ftp 3728 0 (unused)
iptable_nat 21848 2 [ipt_REDIRECT ipt_MASQUERADE ip_nat_ftp]
ip_tables 15136 11 [iptable_filter ipt_state ipt_REJECT
ipt_REDIRECT ipt_MASQUERADE ipt_mark ipt_LOG ipt_limit iptable_nat]
ip_conntrack_ftp 4944 1
ip_conntrack 28552 3 [ipt_state ipt_REDIRECT ipt_MASQUERADE
ip_nat_ftp iptable_nat ip_conntrack_ftp]
natsemi 19232 3
keybdev 2656 0 (unused)
mousedev 5268 0 (unused)
hid 23908 0 (unused)
input 5888 0 [keybdev mousedev hid]
usb-uhci 26124 0 (unused)
usbcore 78752 1 [hid usb-uhci]
ext3 71620 2
jbd 51276 2 [ext3]
Quoting Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>:
>
> Please post your exact kernel version number, loaded in kernel modules,
> your complete ruleset *and* a real tcpdump output.
>
> Server SYN/ACK response does not reach the client: that's all one can say.
>
> Best regards,
> Jozsef
> -
> E-mail : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
> PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
> Address : KFKI Research Institute for Particle and Nuclear Physics
> H-1525 Budapest 114, POB. 49, Hungary
>
>
next prev parent reply other threads:[~2004-06-18 20:16 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-06-18 19:48 state table not working Daniel Wittenberg
2004-06-18 20:09 ` Jozsef Kadlecsik
2004-06-18 20:16 ` Daniel Wittenberg [this message]
2004-06-21 9:38 ` Jozsef Kadlecsik
2004-06-21 13:48 ` Daniel Wittenberg
2004-06-21 14:02 ` Jozsef Kadlecsik
2004-06-21 14:47 ` Daniel Wittenberg
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1087589791.40d34d9f4907f@securemail.starken.com \
--to=daniel-wittenberg@starken.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).