bugzilla-daemon@bugzilla.netfilter.org
2006-Jan-25 12:55 UTC
[Bug 400] connection tracking does not work on VLANs if underlying interface is a bridge
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=400 ------- Additional Comments From kaber@trash.net 2006-01-25 12:55 MET ------- Please add a LOG rule to PRE_ROUTING in the mangle table and post the output. BTW, are you using hardware checksumming (check with ethtool) on the underlying ethernet device? -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon@bugzilla.netfilter.org
2006-Jan-25 12:55 UTC
[Bug 400] connection tracking does not work on VLANs if underlying interface is a bridge
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=400 ------- Additional Comments From kaber@trash.net 2006-01-25 12:55 MET ------- Please add a LOG rule to PRE_ROUTING in the mangle table and post the output. BTW, are you using hardware checksumming (check with ethtool) on the underlying ethernet device? -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You reported the bug, or are watching the reporter.
bugzilla-daemon@bugzilla.netfilter.org
2006-Jan-30 18:31 UTC
[Bug 400] connection tracking does not work on VLANs if underlying interface is a bridge
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=400 ------- Additional Comments From schulz@schwaar.com 2006-01-30 18:31 MET ------- Different "--log-prefix" of the rules (see below): 'P ' <=> PREROUTING '1 ' <=> line 1 of INPUT '3 ' <=> line 3 of INPUT '5 ' <=> line 5 of INPUT 'O ' <=> line 1 of OUTPUT Log of 'echo -e "GET / HTTP/1.0\n\n|netcat 213.95.27.115 80' is attached (LOG20060130). roadwarrior:~# iptables -t mangle -L -nv Chain PREROUTING (policy ACCEPT 34386 packets, 28M bytes) pkts bytes target prot opt in out source destination 1230 467K LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `P ' roadwarrior:~# iptables -L INPUT -nv Chain INPUT (policy ACCEPT 63075 packets, 38M bytes) pkts bytes target prot opt in out source destination 19 2284 LOG all -- vlan0075 * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `1 ' 10 1828 ACCEPT all -- vlan0075 * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 9 456 LOG all -- vlan0075 * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `3 ' 21 976 ACCEPT tcp -- vlan0075 * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 5 232 LOG all -- vlan0075 * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `5 ' 0 0 ACCEPT udp -- vlan0075 * 0.0.0.0/0 0.0.0.0/0 udp dpts:32768:61000 1 28 ACCEPT icmp -- vlan0075 * 0.0.0.0/0 0.0.0.0/0 113 24549 DROP all -- vlan0075 * 0.0.0.0/0 0.0.0.0/0 roadwarrior:~# iptables -L OUTPUT -nv Chain OUTPUT (policy ACCEPT 32727 packets, 2963K bytes) pkts bytes target prot opt in out source destination 21 1241 LOG all -- * vlan0075 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `O ' -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon@bugzilla.netfilter.org
2006-Jan-30 18:33 UTC
[Bug 400] connection tracking does not work on VLANs if underlying interface is a bridge
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=400 ------- Additional Comments From schulz@schwaar.com 2006-01-30 18:33 MET ------- Created an attachment (id=204) --> (https://bugzilla.netfilter.org/bugzilla/attachment.cgi?id=204&action=view) log of today's test -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon@bugzilla.netfilter.org
2006-Jan-31 17:15 UTC
[Bug 400] connection tracking does not work on VLANs if underlying interface is a bridge
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=400 ------- Additional Comments From schulz@schwaar.com 2006-01-31 17:15 MET ------- I forgot to answer yesterday:>BTW, are you using hardware checksumming (check with ethtool) on the underlyingethernet device? I don't think so. This is an Apple UniNorth GMAC (Sun GEM). I use "sungem.ko". 'ethtool -k' say 'Operation not supported' -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-17 09:31 UTC
[Bug 400] connection tracking does not work on VLANs if underlying interface is a bridge
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=400 ------- Additional Comments From kaber@trash.net 2006-02-17 09:31 MET ------- Looking at the source, it uses HW checksum unconditionally. Please try "echo 255 >/proc/sys/net/ipv4/netfilter/ip_conntrack_log_invalid" after loading the ipt_LOG module and post the output, if any. Thanks. -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-17 09:31 UTC
[Bug 400] connection tracking does not work on VLANs if underlying interface is a bridge
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=400 ------- Additional Comments From kaber@trash.net 2006-02-17 09:31 MET ------- Looking at the source, it uses HW checksum unconditionally. Please try "echo 255 >/proc/sys/net/ipv4/netfilter/ip_conntrack_log_invalid" after loading the ipt_LOG module and post the output, if any. Thanks. -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You reported the bug, or are watching the reporter.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-20 05:35 UTC
[Bug 400] connection tracking does not work on VLANs if underlying interface is a bridge
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=400 ------- Additional Comments From kaber@trash.net 2006-02-20 05:35 MET ------- It could also be related to the bridge-netfilter derfered-hook calling hacks. This is more likely than HW-checksums, if you have CONFIG_BRIDGE_NETFILTER enabled, please try disabling it. -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-20 05:35 UTC
[Bug 400] connection tracking does not work on VLANs if underlying interface is a bridge
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=400 ------- Additional Comments From kaber@trash.net 2006-02-20 05:35 MET ------- It could also be related to the bridge-netfilter derfered-hook calling hacks. This is more likely than HW-checksums, if you have CONFIG_BRIDGE_NETFILTER enabled, please try disabling it. -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You reported the bug, or are watching the reporter.
Reasonably Related Threads
- [Bug 400] connection tracking does not work on VLANs if underlying interface is a bridge
- [Bug 318] masq fails on existing connection using marks and iproute2 source routing
- [Bug 554] Packet illegaly bypassing SNAT
- [Bug 552] Strange DNAT behaviour... packet don't pass to PREROUTING and go directly in INPUT !!
- [Bug 443] 2.6 kernel failing in NAT with significant outbound traffic