Linux Netfilter discussions
 help / color / mirror / Atom feed
* packets skipping DNAT rules
@ 2006-03-29 18:05 Mr Ritter
  2006-03-31  9:47 ` Martijn Lievaart
  0 siblings, 1 reply; 2+ messages in thread
From: Mr Ritter @ 2006-03-29 18:05 UTC (permalink / raw)
  To: netfilter

I have some rules in the PREROUTING of the nat table that perform a DNAT 
however, on a very consistent basis the rules doesn't get applied and 
the packet ends up in the filter table without the destination modified. 
95% of the time it works, 5% it doesn't. I can't put a finger on whats 
causing it, or see anything in particular about the packets that fail to 
DNAT. Any suggestions on how to resolve this?

--
Ritter



^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: packets skipping DNAT rules
  2006-03-29 18:05 packets skipping DNAT rules Mr Ritter
@ 2006-03-31  9:47 ` Martijn Lievaart
  0 siblings, 0 replies; 2+ messages in thread
From: Martijn Lievaart @ 2006-03-31  9:47 UTC (permalink / raw)
  To: netfilter; +Cc: netfilter

Mr Ritter zei:
> I have some rules in the PREROUTING of the nat table that perform a DNAT
>  however, on a very consistent basis the rules doesn't get applied and
> the packet ends up in the filter table without the destination modified.
>  95% of the time it works, 5% it doesn't. I can't put a finger on whats
> causing it, or see anything in particular about the packets that fail to
>  DNAT. Any suggestions on how to resolve this?

You can start by posting your ruleset, please show us the output from
iptables-save. Also, you failed to mention if those packets that don't get
DNATted are really random or creating a new connection.

HTH,
M4





^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2006-03-31  9:47 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-03-29 18:05 packets skipping DNAT rules Mr Ritter
2006-03-31  9:47 ` Martijn Lievaart

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox