Displaying 1 result from an estimated 1 matches for "netfilterorg".
2019 Jun 19
2
[Bug 1343] New: With iPv6 masquerade, ICMPv6 time-exceeded pkts are forwarded with bad checksum
...r/iptables
Version: unspecified
Hardware: x86_64
OS: Debian GNU/Linux
Status: NEW
Severity: normal
Priority: P5
Component: NAT
Assignee: netfilter-buglog at lists.netfilter.org
Reporter: doron.shikmoni+netfilterorg at gmail.com
I have a system that does IPv6 MASQUERADE, a POSTROUTING rule in the NAT table.
For the most part it works fine, however ICMPv6 type 3 (TIME-EXCEED) seems to
have their ICMPv6 checksum botched, and hence are dropped at the next hop.
I see the packets entering the via the upstream int...