netfilter buglog - Jun 2003 - [Bug 106] iptables 1.2.5-3 acts differently with different RH Linux kernel versions

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=106

laforge@netfilter.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED



------- Additional Comments From laforge@netfilter.org  2003-06-30 17:12 -------
can you please try to use a later version of iptables? 

There are iptables-1.2.8 rpms for rh7.3 at
http://gnumonks.org/ftp/pub/rpms/redhat-7.3/RPMS/i386/

It should of course even work with the old iptables-1.2.5 - but I'm just
trying
t o find out where the bug could probably be... and this small test would help.



------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=106





------- Additional Comments From jan.grobecker@gmx.net  2003-07-11 21:50 -------
I stumbled on this bug when googling on the reason why my firewall was reported
as stealthed when running a check against it. I'm also using RedHat 7.3
running
a self-compiled 2.4.20-18.7 kernel and iptables 1.2.5-3. Obviously iptables
doesn't send out tcp-reset packages even when told to do so when using that
kernel version. I can confirm that iptables behaves as aspected when running a
self-compiled kernel 2.4.18-27.7x with the same kernel options.

I installed iptables 1.2.8 from gnumonks.org as you told James to do only to
find that the problem still remains. I hope this will help you solving the
problem. Contact me if you want me to perform any other tests.



------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=106





------- Additional Comments From jan.grobecker@gmx.net  2003-07-12 19:33 -------
In addition to my last comment I'd like to point you to
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=91448 where there's a
discussion about this issue. There's also a kernel patch from someone from
shorewall whereas Alan Cox blames netfilter for the problem. I haven't tried
to
apply that patch yet.



------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=106

gandalf@netfilter.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|                            |INVALID



------- Additional Comments From gandalf@netfilter.org  2003-07-12 20:41 -------
This was caused by a bug introduced in -rc1 and fixed in -rc2.
-rc2 already existed when the entry was created in RH bugzilla.

So this is a RH problem, the bug was fixed some time ago, they just havn't
updated their kernelpackages.




------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.