search for: ip_nat_core

...ReportedBy: georg.wild@gmx.de CC: netfilter-buglog@lists.netfilter.org I got errors compiling kernel modules; I think this is caused by gcc 3.3, which doesn't allow multiline strings any more?: DEBUGP("calling nat helper (exp=%p) for packet\n", exp); ip_nat_core.c:854:40: missing terminating " character ip_nat_core.c:855:49: missing terminating " character ip_nat_core.c:1038:1: unterminated argument list invoking macro "DEBUGP" ip_nat_core.c: In function `do_bindings': ip_nat_core.c:1038: error: `DEBUGP' undeclared (first use in...

...3D skb->nh.iph->protocol; - ip_build_xmit(sk, ip_reply_glue_bits, arg, len, &ipc, rt, MSG_DONTWAIT); + ip_build_xmit(sk, ip_reply_glue_bits, arg, len, &ipc, rt, MSG_DONTWAIT, + NULL); bh_unlock_sock(sk); =20 ip_rt_put(rt); diff -urN linux-2.4.19-pre6.orig/net/ipv4/netfilter/ip_nat_core.c linux-2.4= .19-pre6-nf-01/net/ipv4/netfilter/ip_nat_core.c --- linux-2.4.19-pre6.orig/net/ipv4/netfilter/ip_nat_core.c Sun Apr 7 15:2= 7:29 2002 +++ linux-2.4.19-pre6-nf-01/net/ipv4/netfilter/ip_nat_core.c Fri Apr 12 00:= 52:31 2002 @@ -780,6 +780,18 @@ } else return NF_ACCEPT; } =20 +/* + *...

...nk #4 succeeded at 366 with fuzz 2. Hunk #5 FAILED at 384. Hunk #6 succeeded at 436 with fuzz 1. 1 out of 12 hunks FAILED -- saving rejects to file net/ipv4/fib_semantics.c.rej patching file net/ipv4/ip_nat_dumb.c patching file net/ipv4/netfilter/ip_fw_compat_masq.c patching file net/ipv4/netfilter/ip_nat_core.c Hunk #1 succeeded at 962 (offset 9 lines). patching file net/ipv4/netfilter/ip_nat_standalone.c Hunk #1 succeeded at 221 (offset -5 lines). Hunk #2 succeeded at 300 with fuzz 2 (offset 1 line). Hunk #3 succeeded at 330 with fuzz 2 (offset -5 lines). patching file net/ipv4/netfilter/ipt_MASQUERADE...

Hello all, After perusing the documentation, faqs, and mailing list archives, I have not been able to find a way to do the following. I''m hoping "you" can help. I want to transparently redirect all outbound SMTP connections to an SMTP server of *my* choice. This way, regardless of what a user on my network has set their SMTP server to be within their MUA, I will redirect

...; Hi, > > I''m using a kernel of version 2.4.18 where module-support is disabled > together with iptables-1.2.6a ( all compiled by myself). > I applied patches to netfilter using POM. which patches? > The following messages are seen in my log-file > ASSERT: ip_nat_core.c: 743 &ip_conntrack_lock not readlocked > ASSERT:ip_conntrack_core.c: 973 &ip_conntrack_lock readlocked how often do you see them? Do they have always the same line number? Could you send me a grep on all ''ASSERT:'' entries in your syslog? What kind of machin...

...void *userdata) { struct ipt_imq_info *mr = (struct ipt_imq_info*)targinfo; (*pskb)->imq_flags = mr->todev | IMQ_F_ENQUEUE; (*pskb)->nfcache |= NFC_ALTERED; return IPT_CONTINUE; } I found that in places like ip_conntrack_core.c and ip_nat_core.c, nfcache references have just being removed. Tk in advance for any help. Cheers... -------------------------------------------------------------------- Andre D. Correa, CISSP | Visite meus projetos pessoais: andre.correa (at) pobox.com | Visit my personal projects: http://andre.h...

...nclude/linux/netfilter_ipv4/ip_conntrack.h. ld -m elf_i386 -r -o ip_conntrack.o ip_conntrack_standalone.o ip_conntrack_core.o ip_conntrack_proto_generic.o ip_conntrack_proto_tcp.o ip_conntrack_proto_udp.o ip_conntrack_proto_icmp.o ld -m elf_i386 -r -o iptable_nat.o ip_nat_standalone.o ip_nat_rule.o ip_nat_core.o ip_nat_helper.o ip_nat_proto_unknown.o ip_nat_proto_tcp.o ip_nat_proto_udp.o ip_nat_proto_icmp.o gcc -D__KERNEL__ -I/usr/src/linux-2.4.19/include -Wall -Wstrict-prototypes -Wno-trigraphs -O2 -fno-strict-aliasing -fno-common -fomit-frame-pointer -pipe -mpreferred-stack-boundary=2 -march=i686 -DMOD...

...he NAT box is a gateway, and the connection is initiated on another box. * if the connection is not initiated, but accepted As SNAT happens at NF_IP_POST_ROUTING, reply translation will be performed at NF_IP_PRE_ROUTING. The following DEBUG output shows what happens (enabled DEBUGP at the top of ip_nat_core.c): icmp reply translation, ct=c3617480, hooknum=0, ctinfo=4 icmp_reply_translation: translating error c396f260 hook 0 dir REPLY, num_manips=2 icmp_reply: manip 0 dir ORIG hook 4 icmp_reply: manip 1 dir REPLY hook 0 icmp_reply: outer DST -> 192.168.131.124 As it seems the inner manip is not ca...

...ux/netfilter.h> +#include <linux/ip.h> +#include <linux/tcp.h> +#include <linux/if.h> +#include <linux/netfilter_ipv4/ip_nat.h> +#include <linux/netfilter_ipv4/ip_nat_rule.h> +#include <linux/netfilter_ipv4/ip_nat_protocol.h> +#include <linux/netfilter_ipv4/ip_nat_core.h> + +static int +tcp_in_range(const struct ip_conntrack_tuple *tuple, + enum ip_nat_manip_type maniptype, + const union ip_conntrack_manip_proto *min, + const union ip_conntrack_manip_proto *max) +{ + u_int16_t port; + + if (maniptype == IP_NAT_MANIP_SRC) + port = tuple->src....

Dear Sir, Please help me in building the right solution. My requirement is: 1st I want to club both ISP bandwidth to get 512kbps. 2nd, In normal condition, it should be in Load balancing. 3rd , In ISP Failover condition, traffic will automatically route to working ISP. What I have: I have installed the RHEL 3.0 with 3 Network Card. Kernel is 2.4.21-9EL I have the link from two ISP both