bugzilla-daemon@bugzilla.netfilter.org
2006-May-13 19:17 UTC
[Bug 473] 2.6.16.x translates addresses of RELATED packets incorrectly
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=473
netfilter@linuxace.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |INVALID
------- Additional Comments From netfilter@linuxace.com 2006-05-13 19:17 MET
-------
This is by design, and is due to commit bc6e14b6f0b06fe93d809d22e257ddd275feeda9
in 2.6.16 with this description:
[NETFILTER]: Fix NAT PMTUD problems
ICMP errors are only SNATed when their source matches the source of the
connection they are related to, otherwise the source address is not
changed. This creates problems with ICMP frag. required messages
originating from a router behind the NAT, if private IPs are used the
packet has a good change of getting dropped on the path to its destination.
Always NAT ICMP errors similar to the original connection.
closing -- not a bug.
--
Configure bugmail:
https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You reported the bug, or are watching the reporter.
bugzilla-daemon@bugzilla.netfilter.org
2006-May-13 19:17 UTC
[Bug 473] 2.6.16.x translates addresses of RELATED packets incorrectly
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=473
netfilter@linuxace.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |INVALID
------- Additional Comments From netfilter@linuxace.com 2006-05-13 19:17 MET
-------
This is by design, and is due to commit bc6e14b6f0b06fe93d809d22e257ddd275feeda9
in 2.6.16 with this description:
[NETFILTER]: Fix NAT PMTUD problems
ICMP errors are only SNATed when their source matches the source of the
connection they are related to, otherwise the source address is not
changed. This creates problems with ICMP frag. required messages
originating from a router behind the NAT, if private IPs are used the
packet has a good change of getting dropped on the path to its destination.
Always NAT ICMP errors similar to the original connection.
closing -- not a bug.
--
Configure bugmail:
https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon@bugzilla.netfilter.org
2006-May-13 19:17 UTC
[Bug 473] 2.6.16.x translates addresses of RELATED packets incorrectly
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=473
netfilter@linuxace.com changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |netfilter@linuxace.com
--
Configure bugmail:
https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.