Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Wim Ceulemans <wim.ceulemans@able.be>
To: Harald Welte <laforge@netfilter.org>
Cc: Netfilter Development Mailinglist
	<netfilter-devel@lists.netfilter.org>,
	Netfilter Mailinglist <netfilter@lists.netfilter.org>
Subject: Re: New Version (1.13) of PPTP conntrack/nat helper
Date: Wed, 24 Sep 2003 13:42:10 +0200	[thread overview]
Message-ID: <3F718312.4020000@able.be> (raw)
In-Reply-To: <20030924101329.GW31401@sunbeam.de.gnumonks.org>

[-- Attachment #1: Type: text/plain, Size: 1294 bytes --]

Harald

Sorry, my mistake, the crashes occur with CONFIG_IP_NF_NAT_LOCAL is 
switched off.
I'll produce a debug log when CONFIG_IP_NF_NAT_LOCAL is on of one PPTP 
session through the firewall.

Regards
Wim

Harald Welte wrote:

>On Tue, Sep 23, 2003 at 06:25:40PM +0200, Wim Ceulemans wrote:
> 
>  
>
>>If I switch CONFIG_IP_NF_NAT_LOCAL off, the forwarding to a pptp server 
>>behind the firewall works.
>>If switch it on, I don't see any gre packet behind the firewall, so it 
>>does not work.
>>
>>However, with CONFIG_IP_NF_NAT_LOCAL on I have had two freezes (firewall 
>>completely stuck and I had to switch it on and off).
>>    
>>
>
>So to summarize:  It works perfectly of it is OFF, but you have problems
>with DNAT and crashes, if it is ON.  That is surprising - it seems like
>the problems have just been reverting :(
>
>Did you do anything in particular when the firewall hang happened? (like
>unloading/loading a module, ...)?
>
>  
>
>>Regards
>>Wim
>>    
>>
>
>  
>


-- 
Wim Ceulemans
R&D Engineer

Secure Internet Communication with aXs Guard

Able NV
Leuvensesteenweg 282 - B-3190 Boortmeerbeek - Belgium
Phone: + 32 15 50.44.00 - Fax: + 32 15 50.44.09
E-mail: wim.ceulemans@able.be



--
Security check on this e-mail has been done by aXs GUARD
(http://www.axsguard.com)


  reply	other threads:[~2003-09-24 11:42 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-09-22 20:30 New Version (1.13) of PPTP conntrack/nat helper Harald Welte
2003-09-23 13:38 ` Wim Ceulemans
2003-09-23 14:49   ` Harald Welte
2003-09-23 16:25     ` Wim Ceulemans
2003-09-24 10:13       ` Harald Welte
2003-09-24 11:42         ` Wim Ceulemans [this message]
2003-09-24 16:34           ` Wim Ceulemans

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=3F718312.4020000@able.be \
    --to=wim.ceulemans@able.be \
    --cc=laforge@netfilter.org \
    --cc=netfilter-devel@lists.netfilter.org \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox