Linux 2.4.23-pre1

DISCUSSION Hans Lambrechts 2 participants 3 messages Aug 28, 2003 1 message not in the archive netfilter

lore

Share & tools

lore

A message that is not in the archive (sent off-list or not yet received): [email protected]

Hans Lambrechts

author

2003-08-28 08:57 UTC #1 lore raw

Greetings,

Quoted 6 lines

Harald Welte:
o [NETFILTER]: Backport iptables AH/ESP fixes from 2.6.x
o [NETFILTER]: Fix uninitialized return in iptables tftp
o [NETFILTER]: NAT optimization
o [NETFILTER]: Conntrack optimization (LIST_DELETE)

I see this in my log:

Aug 28 10:45:44 pc kernel: MASQUERADE: No route: Rusty's brain broke!
Aug 28 10:46:10 pc last message repeated 13 times
Aug 28 10:48:42 pc kernel: NET: 1 messages suppressed.
Aug 28 10:48:42 pc kernel: MASQUERADE: No route: Rusty's brain broke!
Aug 28 10:48:43 pc kernel: MASQUERADE: Route sent us somewhere else.

Forwarding and masquerading doesn't work anymore.

Hans

Patrick McHardy

2003-08-28 14:55 UTC #2 lore raw

Please try this patch.

Regards,
Patrick

Quoted 22 lines · Hans Lambrechts

Greetings,
Quoted 8 lines
Harald Welte:
o [NETFILTER]: Backport iptables AH/ESP fixes from 2.6.x
o [NETFILTER]: Fix uninitialized return in iptables tftp
o [NETFILTER]: NAT optimization
o [NETFILTER]: Conntrack optimization (LIST_DELETE)
I see this in my log:
Aug 28 10:45:44 pc kernel: MASQUERADE: No route: Rusty's brain broke!
Aug 28 10:46:10 pc last message repeated 13 times
Aug 28 10:48:42 pc kernel: NET: 1 messages suppressed.
Aug 28 10:48:42 pc kernel: MASQUERADE: No route: Rusty's brain broke!
Aug 28 10:48:43 pc kernel: MASQUERADE: Route sent us somewhere else.

Quoted 5 lines

Forwarding and masquerading doesn't work anymore.
Hans

===== net/ipv4/netfilter/ipt_MASQUERADE.c 1.6 vs edited =====

net/ipv4/netfilter/ipt_MASQUERADE.c +1 -0

@@ -90,6 +90,7 @@
 #ifdef CONFIG_IP_ROUTE_FWMARK
 	key.fwmark = (*pskb)->nfmark;
 #endif
+	key.oif = 0;
 	if (ip_route_output_key(&rt, &key) != 0) {
                 /* Funky routing can do this. */
                 if (net_ratelimit())

Hans Lambrechts

author

2003-08-28 15:49 UTC #3 lore raw

Thanks Patrick,

forwarding and NAT works as before

greetings,
Hans

----- Original Message -----
From: "Patrick McHardy" <[email protected]>
To: "Hans Lambrechts" <[email protected]>
Cc: <[email protected]>; "Netfilter Development Mailinglist" <[email protected]>
Sent: Thursday, August 28, 2003 4:56 PM
Subject: Re: Linux 2.4.23-pre1

Quoted 35 lines

Please try this patch.
Regards,
Patrick
Quoted 27 lines · Hans Lambrechts
Greetings,
Quoted 8 lines
Harald Welte:
o [NETFILTER]: Backport iptables AH/ESP fixes from 2.6.x
o [NETFILTER]: Fix uninitialized return in iptables tftp
o [NETFILTER]: NAT optimization
o [NETFILTER]: Conntrack optimization (LIST_DELETE)
I see this in my log:
Aug 28 10:45:44 pc kernel: MASQUERADE: No route: Rusty's brain broke!
Aug 28 10:46:10 pc last message repeated 13 times
Aug 28 10:48:42 pc kernel: NET: 1 messages suppressed.
Aug 28 10:48:42 pc kernel: MASQUERADE: No route: Rusty's brain broke!
Aug 28 10:48:43 pc kernel: MASQUERADE: Route sent us somewhere else.
Forwarding and masquerading doesn't work anymore.
Hans

----------------------------------------------------------------------------
----

Quoted 12 lines

===== net/ipv4/netfilter/ipt_MASQUERADE.c 1.6 vs edited =====
net/ipv4/netfilter/ipt_MASQUERADE.c Thu Aug 28 16:54:15 2003 renamed from net/ipv4/netfilter/ipt_MASQUERADE.c Tue Aug 12 11:30:12 2003 +1 -0
@@ -90,6 +90,7 @@
 #ifdef CONFIG_IP_ROUTE_FWMARK
  key.fwmark = (*pskb)->nfmark;
 #endif
+ key.oif = 0;
  if (ip_route_output_key(&rt, &key) != 0) {
                 /* Funky routing can do this. */
                 if (net_ratelimit())