netfilter buglog - Sep 2006 - [Bug 508] ip6tables conntrack marks all incoming packets as INVALID

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=508





------- Additional Comments From kaber@trash.net  2006-09-14 13:18 MET -------
Did you enable nf_conntrack and the ipv6 connection tracking module?

-- 
Configure bugmail:
https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=508





------- Additional Comments From kaber@trash.net  2006-09-14 13:18 MET -------
Did you enable nf_conntrack and the ipv6 connection tracking module?

-- 
Configure bugmail:
https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You reported the bug, or are watching the reporter.

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=508





------- Additional Comments From lorimz@gmail.com  2006-09-14 14:15 MET -------
(In reply to comment #1)
> Did you enable nf_conntrack and the ipv6 connection tracking module?
eddie morris # cat /usr/src/linux/.config | grep -i nf_con
CONFIG_IP_NF_CONNTRACK=y
CONFIG_IP_NF_CONNTRACK_MARK=y
CONFIG_IP_NF_CONNTRACK_EVENTS=y
CONFIG_IP_NF_CONNTRACK_NETLINK=y
eddie morris # cat /usr/src/linux/.config | grep -i ipv6
CONFIG_IPV6=y
CONFIG_IPV6_PRIVACY=y
# CONFIG_IPV6_ROUTER_PREF is not set
CONFIG_IPV6_TUNNEL=y
# IPv6: Netfilter Configuration (EXPERIMENTAL)
CONFIG_IP6_NF_MATCH_IPV6HEADER=y
eddie morris # cat /usr/src/linux/.config | grep -i -A20 "ipv6:
netfilter"
# IPv6: Netfilter Configuration (EXPERIMENTAL)
#
# CONFIG_IP6_NF_QUEUE is not set
CONFIG_IP6_NF_IPTABLES=y
CONFIG_IP6_NF_MATCH_RT=y
CONFIG_IP6_NF_MATCH_OPTS=y
CONFIG_IP6_NF_MATCH_FRAG=y
CONFIG_IP6_NF_MATCH_HL=y
CONFIG_IP6_NF_MATCH_OWNER=y
CONFIG_IP6_NF_MATCH_IPV6HEADER=y
CONFIG_IP6_NF_MATCH_AH=y
CONFIG_IP6_NF_MATCH_EUI64=y
CONFIG_IP6_NF_FILTER=y
CONFIG_IP6_NF_TARGET_LOG=y
CONFIG_IP6_NF_TARGET_REJECT=y
CONFIG_IP6_NF_MANGLE=y
CONFIG_IP6_NF_TARGET_HL=y
CONFIG_IP6_NF_RAW=y

#
# DCCP Configuration (EXPERIMENTAL)
eddie morris #

as i've said, i've marked "Y" ALL the stuff in networking

-- 
Configure bugmail:
https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=508


kaber@trash.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID




------- Additional Comments From kaber@trash.net  2006-09-15 07:16 MET -------
(In reply to comment #2)
> (In reply to comment #1)
> > Did you enable nf_conntrack and the ipv6 connection tracking module?
> 
> eddie morris # cat /usr/src/linux/.config | grep -i nf_con
> CONFIG_IP_NF_CONNTRACK=y
The option for IPv4/IPv6 connection tracking isn't visible if you select
pure IP
connection tracking. Set it to 'n' and run make oldconfig.

-- 
Configure bugmail:
https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=508


kaber@trash.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID




------- Additional Comments From kaber@trash.net  2006-09-15 07:16 MET -------
(In reply to comment #2)
> (In reply to comment #1)
> > Did you enable nf_conntrack and the ipv6 connection tracking module?
> 
> eddie morris # cat /usr/src/linux/.config | grep -i nf_con
> CONFIG_IP_NF_CONNTRACK=y
The option for IPv4/IPv6 connection tracking isn't visible if you select
pure IP
connection tracking. Set it to 'n' and run make oldconfig.

-- 
Configure bugmail:
https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You reported the bug, or are watching the reporter.

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=508





------- Additional Comments From lorimz@gmail.com  2006-09-15 11:23 MET -------
(In reply to comment #3)
> The option for IPv4/IPv6 connection tracking isn't visible if you
select pure IP
> connection tracking. Set it to 'n' and run make oldconfig.
ok, that seems to work.
sorry for the report, but it is quite hard to find this "new layer 3"
stuff

-- 
Configure bugmail:
https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.