search for: nfqnl__test_8c_source

...at gmail.com Estimated Hours: 0.0 I discovered a problem with NFQUEUE and large ICMP packets. First I thought it was something in my packet processor implementation, but the example code from netfilter.org reproduces the issue I faced. http://netfilter.org/projects/libnetfilter_queue/doxygen/nfqnl__test_8c_source.html Compiled with: $ gcc nfqnl_test.c -o nfqnl_test -lnetfilter_queue Test setup: # iptables -F # iptables -I INPUT -j NFQUEUE --queue-num 1 # ./nfqnl_test So far everything is ok. I can see packets flowing via the queue. First a working large ICMP packet: $ ping -c 4 -s 3980 localhost PING...

...epted queued paquet would in fact be lost. I am having the problem on a custom 2.6.37.2 kernel, but not on the official Debian Squeeze kernel (2.6.32-5). The code I use is very similar to the test code available on the netfilter website (http://www.netfilter.org/projects/libnetfilter_queue/doxygen/nfqnl__test_8c_source.html), accepting every queued packet. I am queuing outgoing DNS requests with the following rule: iptables -A OUTPUT -p udp --dport 53 -j NFQUEUE --queue-num 666 Then, launch a browser (tested with Firefox 3.5 and Chromium 9), type a URL, the browser hangs for 5 seconds and then displays the web...