search for: nf_nat

...ft_limit 16384 0 nft_ct 20480 0 nf_conntrack 163840 1 nft_ct nf_tables 163840 4 nft_ct,nft_log,nft_limit,nf_tables_set Edit: table inet nats { -> table ip nats { $ sudo /etc/nftables.conf $ lsmod |grep nft nft_chain_nat 16384 2 nf_nat 53248 1 nft_chain_nat nft_log 16384 3 nft_limit 16384 2 nft_ct 20480 2 nf_conntrack 163840 2 nf_nat,nft_ct nf_tables 163840 101 nft_ct,nft_log,nft_chain_nat,nft_limit,nf_tables_set Edit, back the way it was:...

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=530 Summary: loading nf_nat verision of the iptable_nat module kills existing connections Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: nf_c...

...14208 2 ipt_IMQ 1792 0 imq 3592 0 xt_mac 1792 19 ipt_LOG 5504 2 xt_limit 2304 2 xt_multiport 3200 4 xt_state 2176 3 iptable_mangle 2304 1 iptable_nat 6020 1 nf_nat 13996 2 ipt_MASQUERADE,iptable_nat nf_conntrack_ipv4 12940 5 iptable_nat nf_conntrack 46584 5 ipt_MASQUERADE,xt_state,iptable_nat,nf_nat,nf_conntrack_ipv4 nfnetlink 4888 3 nf_nat,nf_conntrack_ipv4,nf_conntrack iptable_filter 2436 1 ip_table...

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=530 kaber@trash.net changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED ------- Additional Comments From kaber@trash.net 2007-01-09

...ication in question uses Qt, which opens the UDP socket in >> non-blocking mode - apparently that's an issue because reading from the >> socket in blocking mode does not cause the problem. >> >> By chance I hit on the fact that once the netfilter kernel-modules >> (nf_nat, iptable_nat, nf_nat ...) are loaded the problem disappears and >> UDP packets of all sizes are correctly delivered and processed. >> >> NOTES: >> - I'm not using netfilter. My iptables are empty, firewalld is not >> running. >> >> - Other networking ap...

...32721 0 l2cap 21953 9 rfcomm bluetooth 47013 6 rfcomm,l2cap autofs4 20933 2 fuse 47837 1 tun 12613 0 sunrpc 154785 3 nf_conntrack_netbios_ns 6593 0 iptable_nat 8777 0 nf_nat 18393 1 iptable_nat iptable_mangle 6849 0 nf_conntrack_ipv4 11849 5 iptable_nat,nf_nat xt_state 6209 2 nf_conntrack 51221 5 nf_conntrack_netbios_ns,iptable_nat,nf_nat,nf_conntrack_ipv4,xt_state ipt_REJECT 6977 2 ipt_LOG...

...ce cls_basic cls_flow cls_fw cls_u32 sch_tbf sch_prio sch_htb sch_hfsc sch_ingress sch_sfq xt_CHECKSUM ipt_rpfilter xt_statistic xt_CT xt_LOG xt_time xt_connlimit xt_realm xt_addrtype xt_comment xt_recent xt_policy xt_nat ipt_ULOG ipt_REJECT ipt_MASQUERADE ipt_ECN ipt_CLUSTERIP ipt_ah xt_set ip_set nf_nat _tftp nf_nat_snmp_basic nf_conntrack_snmp nf_nat_sip nf_nat_pptp nf_nat_proto_gre nf_nat_irc nf_nat_h323 nf_nat_ftp nf_conntrack_tftp nf_conntrack_sip nf_conntrack_proto_udplite nf_conntrack_proto_sctp nf_conntrack_pptp nf_ conntrack_proto_gre nf_conntrack_netlink nf_conntrack_netbios_ns nf_conntra...

...ine for normal traffic, but I was unable to get the SIP phones to work. Using ngrep it was plain to see that the although the packets going out were reaching their destination the data inside the sip headers all contained non routable IPs. I used lsmod and saw that the following modules: nf_nat_sip 5084 0 nf_nat 16400 3 nf_nat_sip,ipt_MASQUERADE,iptable_nat nf_conntrack_ipv4 11912 3 iptable_nat,nf_nat nf_defrag_ipv4 1788 1 nf_conntrack_ipv4 were loaded. I also googled and found the http://www.iptel.org/ sipalg/ website, but since this seem...

...237119 28 ip6t_REJECT,ip6table_mangle,nf_conntrack_ipv6,nf_defrag_ipv6, jbd2 46700 1 ext4, mac80211 313896 1 b43, mbcache 3949 1 ext4, md4 3552 0 md5 1664 0 nf_conntrack 44251 13 nf_conntrack_ipv6,nf_nat_irc,nf_nat_ftp,nf_conntrack_irc,nf_conntrack_ftp,ipt_MASQUERADE,iptable_nat,nf_nat_ipv4,nf_nat,xt_conntrack,xt_CT,xt_state,nf_conntrack_ipv4, nf_conntrack_ftp 5104 1 nf_nat_ftp, nf_conntrack_ipv4 4676 4 nf_conntrack_ipv6 5488 3 nf_conntrack_irc 2800 1 nf_nat_irc, nf_de...

...com 2013-09-09 04:48:17 CEST --- Here is another case related to this issue. version: 2.6.32.43-0.4-default hardware: X86_64 [10542399.515396] BUG: unable to handle kernel NULL pointer dereference at 000000000000003e [10542399.523469] IP: [<ffffffffa1491a4b>] find_appropriate_src+0xdb/0x1a0 [nf_nat] [10542399.530843] PGD 17f55ec067 PUD 17fba37067 PMD 0 [10542399.535727] Oops: 0000 [#1] SMP [10542399.539220] last sysfs file: /sys/devices/system/cpu/cpu23/cache/index2/shared_cpu_map [10542399.547355] CPU 8 [10542399.647544] Supported: Yes, External [10542399.651361] Pid: 0, comm: swapper Tainte...

...e not received by the application. The application in question uses Qt, which opens the UDP socket in non-blocking mode - apparently that's an issue because reading from the socket in blocking mode does not cause the problem. By chance I hit on the fact that once the netfilter kernel-modules (nf_nat, iptable_nat, nf_nat ...) are loaded the problem disappears and UDP packets of all sizes are correctly delivered and processed. NOTES: - I'm not using netfilter. My iptables are empty, firewalld is not running. - Other networking applications -at least tcp- are working fine: webbrowsing, ssh,...

...16384 4 nf_conntrack_ipv4 16384 11 nf_defrag_ipv4 16384 1 nf_conntrack_ipv4 xt_conntrack 16384 22 ip6table_filter 16384 1 ip6_tables 28672 1 ip6table_filter nf_conntrack_netbios_ns 16384 0 nf_conntrack_broadcast 16384 1 nf_conntrack_netbios_ns nf_nat_irc 16384 0 nf_conntrack_irc 16384 1 nf_nat_irc nf_nat_ftp 16384 0 nf_nat 32768 2 nf_nat_irc,nf_nat_ftp nf_conntrack_ftp 20480 1 nf_nat_ftp nf_conntrack 131072 10 xt_conntrack,nf_conntrack_ipv6,nf_nat_irc,nf_conntrack_ipv4,nf_nat,nf...

Rowland, The computer name 'martin-RB042AV-ABA-a1410y' was set by Linux Mint when it was installed. I'm not sure I can change it. I check it on the Mint forum. I'll turn off the smb... feature and see what happens. Yes the ports listed below are open and set to pass through the firewall. Should I unset the netbios name". Going to try the modification to the ufw rules file as

...94912 0 ipt_REJECT 11776 1 ipt_LOG 14468 1 xt_limit 11140 2 xt_tcpudp 11776 25 xt_state 10624 5 ipt_addrtype 11136 4 ip6table_filter 11264 1 ip6_tables 29712 1 ip6table_filter nf_nat_irc 10752 0 nf_conntrack_irc 14648 1 nf_nat_irc nf_nat_ftp 11520 0 nf_nat 30100 2 nf_nat_irc,nf_nat_ftp nf_conntrack_ipv4 24216 7 nf_nat nf_defrag_ipv4 10496 1 nf_conntrack_ipv4 nf_conntrack_ftp 17592 1 nf_nat_ftp nf_conntrac...

...heck Checking... Processing /etc/shorewall/params ... Processing /etc/shorewall/shorewall.conf... Loading Modules... ERROR: The h323 helper requires H323 Helpers in your kernel and iptables If I list my modules the h323 NAT and connection tracking modules are listed: # lsmod | grep h323 nf_nat_h323 12937 0 nf_conntrack_h323 42418 1 nf_nat_h323 nf_nat 18378 15 nf_nat_ftp,nf_nat_irc,nf_nat_sip,nf_nat_amanda,ipt_MASQUERADE,nf_nat_proto_gre,ip6t_MASQUERADE,nf_nat_h323,nf_nat_ipv4,nf_nat_ipv6,nf_nat_pptp,nf_nat_tftp,xt_nat,ip6table_nat,iptable_nat nf_conn...

...ble_mangle,nf_conntrack_ipv6,nf_defrag_ipv6, >jbd2 46700 1 ext4, >mac80211 313896 1 b43, >mbcache 3949 1 ext4, >md4 3552 0 >md5 1664 0 >nf_conntrack 44251 13 >nf_conntrack_ipv6,nf_nat_irc,nf_nat_ftp,nf_conntrack_irc,nf_conntrack_ftp,ipt_MASQUERADE,iptable_nat,nf_nat_ipv4,nf_nat,xt_conntrack,xt_CT,xt_state,nf_conntrack_ipv4, >nf_conntrack_ftp 5104 1 nf_nat_ftp, >nf_conntrack_ipv4 4676 4 >nf_conntrack_ipv6 5488 3 >nf_conntrack_irc 2800 1 n...

...16384 4 nf_conntrack_ipv4 16384 11 nf_defrag_ipv4 16384 1 nf_conntrack_ipv4 xt_conntrack 16384 22 ip6table_filter 16384 1 ip6_tables 28672 1 ip6table_filter nf_conntrack_netbios_ns 16384 0 nf_conntrack_broadcast 16384 1 nf_conntrack_netbios_ns nf_nat_irc 16384 0 nf_conntrack_irc 16384 1 nf_nat_irc nf_nat_ftp 16384 0 nf_nat 32768 2 nf_nat_irc,nf_nat_ftp nf_conntrack_ftp 20480 1 nf_nat_ftp nf_conntrack 131072 10 xt_conntrack,nf_conntrack_ipv6,nf_nat_irc,nf_conntrack_ipv4,nf_nat,nf...

...668.547147] ------------[ cut here ]------------ Jul 2 21:42:59 bkp010 kernel: [ 668.547268] WARNING: at fs/btrfs/backref.c:903 find_parent_nodes+0x616/0x815 [btrfs]() Jul 2 21:42:59 bkp010 kernel: [ 668.547414] Modules linked in: veth ipt_MASQUERADE iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack ip_tables x_tables cpufreq_ondemand cpufreq_conservative cpufreq_powersave cpufreq_stats bridge stp llc ipv6 btrfs xor raid6_pq zlib_deflate loop acpi_cpufreq mperf freq_table intel_powerclamp kvm_intel kvm crc32_pclmul microcode ehci_pci ehci_hcd i2c_i801 pcspkr button vid...

.... > > The application in question uses Qt, which opens the UDP socket in > non-blocking mode - apparently that's an issue because reading from the > socket in blocking mode does not cause the problem. > > By chance I hit on the fact that once the netfilter kernel-modules > (nf_nat, iptable_nat, nf_nat ...) are loaded the problem disappears and > UDP packets of all sizes are correctly delivered and processed. > > NOTES: > - I'm not using netfilter. My iptables are empty, firewalld is not running. > > - Other networking applications -at least tcp- are wor...

...uses Qt, which opens the UDP socket in >>> non-blocking mode - apparently that's an issue because reading from the >>> socket in blocking mode does not cause the problem. >>> >>> By chance I hit on the fact that once the netfilter kernel-modules >>> (nf_nat, iptable_nat, nf_nat ...) are loaded the problem disappears and >>> UDP packets of all sizes are correctly delivered and processed. >>> >>> NOTES: >>> - I'm not using netfilter. My iptables are empty, firewalld is not >>> running. >>> >&g...