New: pppoe not working when acting as gateway.
Subsystems (2)
A message that is not in the archive (sent off-list or not yet received): [email protected]/
(switched to email. Please respond via emailed reply-to-all, not via the bugzilla web interface).
Quoted 79 lines · On Sun, 31 Aug 2008 09:59:12 -0700 (PDT) [email protected] wrote:
http://bugzilla.kernel.org/show_bug.cgi?id=11470
Summary: pppoe not working when acting as gateway. Product: Networking Version: 2.5 KernelVersion: 2.6.26.3 Platform: All OS/Version: Linux Tree: Mainline Status: NEW Severity: normal Priority: P1 Component: Netfilter/Iptables AssignedTo: [email protected] ReportedBy: [email protected] CC: [email protected]Latest working kernel version: 2.6.21.7
Earliest failing kernel version: 2.6.22
Distribution: Slackware
Hardware Environment: Ibm Thinkpad T23 Intel(R) Pentium(R) III Mobile CPU
1133MHz
Software Environment:
Problem Description:
Packet are not handled back to clients, neither are see on ppp0Steps to reproduce:
Just put a MASQUERADE rule in iptables, to NAT packects from client to internet, with a FORWARD rule that allow the packects to be forwarded. Try to ping or dig or telnet or whatever from the client and nothing happens.My configuration is :
CLIENT ----> T23 -----> DSL-MODEM -----> INTERNET
Client = linux machine
T23 = linux machine with everything configure to act as a dsl router On T23 I'm using vanilla kernel recompiled by myself, using the same config that is working on 2.6.21.7
pppoe binaries is :
root/usr/src>/usr/sbin/pppoe -V
Roaring Penguin PPPoE Version 3.8I have another linux machine on internet, that I have used to verify the problem.
When I run the ping from the client, on the router I can see the packet come in from the eth0 and leaving natted from the ppp0. On the internet machine I see the icmp packet ( or whatever packet I send ) coming in, and the reply going out to the router machine.
This packet seems to be lost ( i can't see it on the router either on ppp interface than on eth0 interface ), by using tcpdump (3.9.5).
If the communication is started from the router ( icmp, ssh, whatever ) everything works well.Running the 2.6.21.7 but keeping the same configuration for kernel, iptables and all, is seen on router and handled back to client.
Not working behavior is seen on 2.6.22+ to 2.6.26.3
Working behavior is seen on 2.6.21.7- ( at last to 2.6.19.2 which was my starting kernel )At beginning I thought the problem was with iptables
root/usr/src>iptables -V
iptables v1.3.8
but the strange thing is that I can't even see the reply packets on ppp0 interface, while if the trouble was on iptables rules, then I should have seen the packet and then I should have seen it dropped somewhere. Anyway I have put netfilters guys in CC just in case I'm wrong.Googling around I have seen others that have similar behavior and I have seen that in 2.6.22 there is been a lot of change in pppoe area.
Let me know if you need more informations.
The 2.6.22 .config is:
...
Quoted 75 lines · Andrew Morton
(switched to email. Please respond via emailed reply-to-all, not via the bugzilla web interface).
Quoted 70 lines · On Sun, 31 Aug 2008 09:59:12 -0700 (PDT) [email protected] wrote:
http://bugzilla.kernel.org/show_bug.cgi?id=11470
Summary: pppoe not working when acting as gateway. Product: Networking Version: 2.5 KernelVersion: 2.6.26.3 Platform: All OS/Version: Linux Tree: Mainline Status: NEW Severity: normal Priority: P1 Component: Netfilter/Iptables AssignedTo: [email protected] ReportedBy: [email protected] CC: [email protected]Latest working kernel version: 2.6.21.7
Earliest failing kernel version: 2.6.22
Distribution: Slackware Hardware Environment: Ibm Thinkpad T23 Intel(R) Pentium(R) III Mobile CPU
1133MHz
Software Environment:
Problem Description:
Packet are not handled back to clients, neither are see on ppp0Steps to reproduce: Just put a MASQUERADE rule in iptables, to NAT packects from client to internet, with a FORWARD rule that allow the packects to be forwarded. Try to ping or dig or telnet or whatever from the client and nothing happens.
My configuration is :
CLIENT ----> T23 -----> DSL-MODEM -----> INTERNET
Client = linux machine T23 = linux machine with everything configure to act as a dsl router On T23 I'm using vanilla kernel recompiled by myself, using the same config that is working on 2.6.21.7
pppoe binaries is :
root/usr/src>/usr/sbin/pppoe -V
Roaring Penguin PPPoE Version 3.8I have another linux machine on internet, that I have used to verify the problem.
When I run the ping from the client, on the router I can see the packet come in from the eth0 and leaving natted from the ppp0. On the internet machine I see the icmp packet ( or whatever packet I send ) coming in, and the reply going out to the router machine.
This packet seems to be lost ( i can't see it on the router either on ppp interface than on eth0 interface ), by using tcpdump (3.9.5).
If the communication is started from the router ( icmp, ssh, whatever ) everything works well.Running the 2.6.21.7 but keeping the same configuration for kernel, iptables and all, is seen on router and handled back to client.
Not working behavior is seen on 2.6.22+ to 2.6.26.3
Working behavior is seen on 2.6.21.7- ( at last to 2.6.19.2 which was my starting kernel )At beginning I thought the problem was with iptables
root/usr/src>iptables -V
iptables v1.3.8
but the strange thing is that I can't even see the reply packets on ppp0 interface, while if the trouble was on iptables rules, then I should have seen the packet and then I should have seen it dropped somewhere. Anyway I have put netfilters guys in CC just in case I'm wrong.Googling around I have seen others that have similar behavior and I have seen that in 2.6.22 there is been a lot of change in pppoe area.
2.6.22 is the first kernel where we removed IPv4 only conntrack. My guess is that some of the necessary modules aren't loaded, we were missing a dependency or two in the beginning. Specifically, IIRC the NAT module didn't pull in nf_conntrack_ipv4, so please make sure that module is loaded. In case it is, please post the full list of loaded modules.