bugzilla-daemon@bugzilla.netfilter.org
2007-May-17 15:08 UTC
[Bug 554] Packet illegaly bypassing SNAT
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=554
dimetrios@gmail.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Priority|P2 |P5
------- Additional Comments From dimetrios@gmail.com 2007-05-17 15:08 MET
-------
It seems I have the same problem on my gateway:
# iptables -L POSTROUTING -vn -t nat
Chain POSTROUTING (policy ACCEPT 33 packets, 2760 bytes)
pkts bytes target prot opt in out source destination
13066 709K SNAT 0 -- * eth1 0.0.0.0/0 0.0.0.0/0
to:x.x.x.x
Tcpdump shows on eth1 this:
14:58:16.683208 IP 192.168.8.10.2422 > 88.212.200.107.80: F
92352869:92352869(0)
ack 4126547816 win 65336
14:58:19.681996 IP 192.168.8.47.3250 > 66.29.38.208.80: F 0:0(0) ack 1 win
64665
14:58:20.883792 IP 192.168.8.47.3254 > 66.246.246.252.80: F 0:0(0) ack 1 win
65535
14:58:20.884042 IP 192.168.8.47.3256 > 66.246.246.252.80: F 0:0(0) ack 1 win
65535
14:58:28.894434 IP 192.168.8.47.3250 > 66.29.38.208.80: F 0:0(0) ack 1 win
64665
14:58:31.698243 IP 192.168.8.47.3254 > 66.246.246.252.80: F 0:0(0) ack 1 win
65535
14:58:31.698413 IP 192.168.8.47.3256 > 66.246.246.252.80: F 0:0(0) ack 1 win
65535
14:58:47.319398 IP 192.168.8.47.3250 > 66.29.38.208.80: F 0:0(0) ack 1 win
64665
14:58:53.327456 IP 192.168.8.47.3254 > 66.246.246.252.80: F 0:0(0) ack 1 win
65535
14:58:53.327618 IP 192.168.8.47.3256 > 66.246.246.252.80: F 0:0(0) ack 1 win
65535
14:58:57.548654 IP 192.168.8.10.2180 > 81.176.228.129.80: F
3548225671:3548225671(0) ack 3177070811 win 64338
14:58:59.529845 IP 192.168.8.10.2180 > 81.176.228.129.80: F 0:0(0) ack 1 win
64338
14:59:03.494637 IP 192.168.8.10.2180 > 81.176.228.129.80: F 0:0(0) ack 1 win
64338
14:59:11.432915 IP 192.168.8.10.2180 > 81.176.228.129.80: F 0:0(0) ack 1 win
64338
14:59:24.069217 IP 192.168.8.47.3250 > 66.29.38.208.80: F 0:0(0) ack 1 win
64665
14:59:27.452176 IP 192.168.8.10.2180 > 81.176.228.129.80: F 0:0(0) ack 1 win
64338
14:59:36.486054 IP 192.168.8.47.3254 > 66.246.246.252.80: F 0:0(0) ack 1 win
65535
14:59:36.486225 IP 192.168.8.47.3256 > 66.246.246.252.80: F 0:0(0) ack 1 win
65535
--
Configure bugmail:
https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You reported the bug, or are watching the reporter.
bugzilla-daemon@bugzilla.netfilter.org
2007-May-17 15:08 UTC
[Bug 554] Packet illegaly bypassing SNAT
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=554
dimetrios@gmail.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Priority|P2 |P5
------- Additional Comments From dimetrios@gmail.com 2007-05-17 15:08 MET
-------
It seems I have the same problem on my gateway:
# iptables -L POSTROUTING -vn -t nat
Chain POSTROUTING (policy ACCEPT 33 packets, 2760 bytes)
pkts bytes target prot opt in out source destination
13066 709K SNAT 0 -- * eth1 0.0.0.0/0 0.0.0.0/0
to:x.x.x.x
Tcpdump shows on eth1 this:
14:58:16.683208 IP 192.168.8.10.2422 > 88.212.200.107.80: F
92352869:92352869(0)
ack 4126547816 win 65336
14:58:19.681996 IP 192.168.8.47.3250 > 66.29.38.208.80: F 0:0(0) ack 1 win
64665
14:58:20.883792 IP 192.168.8.47.3254 > 66.246.246.252.80: F 0:0(0) ack 1 win
65535
14:58:20.884042 IP 192.168.8.47.3256 > 66.246.246.252.80: F 0:0(0) ack 1 win
65535
14:58:28.894434 IP 192.168.8.47.3250 > 66.29.38.208.80: F 0:0(0) ack 1 win
64665
14:58:31.698243 IP 192.168.8.47.3254 > 66.246.246.252.80: F 0:0(0) ack 1 win
65535
14:58:31.698413 IP 192.168.8.47.3256 > 66.246.246.252.80: F 0:0(0) ack 1 win
65535
14:58:47.319398 IP 192.168.8.47.3250 > 66.29.38.208.80: F 0:0(0) ack 1 win
64665
14:58:53.327456 IP 192.168.8.47.3254 > 66.246.246.252.80: F 0:0(0) ack 1 win
65535
14:58:53.327618 IP 192.168.8.47.3256 > 66.246.246.252.80: F 0:0(0) ack 1 win
65535
14:58:57.548654 IP 192.168.8.10.2180 > 81.176.228.129.80: F
3548225671:3548225671(0) ack 3177070811 win 64338
14:58:59.529845 IP 192.168.8.10.2180 > 81.176.228.129.80: F 0:0(0) ack 1 win
64338
14:59:03.494637 IP 192.168.8.10.2180 > 81.176.228.129.80: F 0:0(0) ack 1 win
64338
14:59:11.432915 IP 192.168.8.10.2180 > 81.176.228.129.80: F 0:0(0) ack 1 win
64338
14:59:24.069217 IP 192.168.8.47.3250 > 66.29.38.208.80: F 0:0(0) ack 1 win
64665
14:59:27.452176 IP 192.168.8.10.2180 > 81.176.228.129.80: F 0:0(0) ack 1 win
64338
14:59:36.486054 IP 192.168.8.47.3254 > 66.246.246.252.80: F 0:0(0) ack 1 win
65535
14:59:36.486225 IP 192.168.8.47.3256 > 66.246.246.252.80: F 0:0(0) ack 1 win
65535
--
Configure bugmail:
https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.