* icmp packets going over wrong link for Local traffic!!!
@ 2004-10-27 20:51 dravya
2004-11-04 2:02 ` Patrick McHardy
0 siblings, 1 reply; 2+ messages in thread
From: dravya @ 2004-10-27 20:51 UTC (permalink / raw)
To: Netfilter mailing list, netfilter-devel
Hi all,
I have applied the Masquerade patch suggested by Rusty (and now Herbert) and everything
works just fine. All packets are masqueraded correctly even when there are multiple
interfaces.
However, there are icmp dest unreachable messages that still go over the wrong link. i.e.
source addr of the wrong link. Since it is local traffic, it will not go through the
masquerading code as the socket would exist ( (*pskb)->sk ) will exist, thereby returning
with NF_ACCEPT and bypassing the masquerade code.
Therefore the problem lies someplace else.... has anyone encountered this problem
before??? I know there was a similar issue with arp requests but don't know what came out
of that.
Any tips or suggestions are welcome.
Thanks
Dravya
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: icmp packets going over wrong link for Local traffic!!!
2004-10-27 20:51 icmp packets going over wrong link for Local traffic!!! dravya
@ 2004-11-04 2:02 ` Patrick McHardy
0 siblings, 0 replies; 2+ messages in thread
From: Patrick McHardy @ 2004-11-04 2:02 UTC (permalink / raw)
To: dravya; +Cc: netfilter-devel, Netfilter mailing list
dravya wrote:
>Hi all,
>
>I have applied the Masquerade patch suggested by Rusty (and now Herbert) and everything
>works just fine. All packets are masqueraded correctly even when there are multiple
>interfaces.
>
>However, there are icmp dest unreachable messages that still go over the wrong link. i.e.
>source addr of the wrong link. Since it is local traffic, it will not go through the
>masquerading code as the socket would exist ( (*pskb)->sk ) will exist, thereby returning
>with NF_ACCEPT and bypassing the masquerade code.
>
Please describe your setup in more detail and show some examples
of the packets with wrong address.
Regards
Patrick
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2004-11-04 2:02 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-10-27 20:51 icmp packets going over wrong link for Local traffic!!! dravya
2004-11-04 2:02 ` Patrick McHardy
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox