Shorewall users - Jun 2005 - [Fwd: Bridge + netfilter failing with recent Fedora 3 kernels.]

--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

2005/6/27, Tom Eastep <teastep@shorewall.net>:
> 
> --
> Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
> Shoreline,     \ http://shorewall.net
> Washington USA  \ teastep@shorewall.net
> PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key
> 
> 
> 
> ---------- Mensaje reenviado ----------
> From: Ian Mortimer <ian@physics.uq.edu.au>
> To: netfilter <netfilter@lists.netfilter.org>
> Date: Tue, 28 Jun 2005 12:53:18 +1000
> Subject: Bridge + netfilter failing with recent Fedora 3 kernels.
> Has anyone else seen this?  A working bridge running Fedora Core 3 fails
> after an upgrade to the one of  the latest Fedora kernels.  What
I''ve
> found is:
> 
>    kernel-2.6.11-1.14_FC3 and earlier work fine
> 
>    kernel-2.6.11-1.27_FC3 and kernel-2.6.11-1.35_FC3 fail!
> 
> The problem is with netfilter not with bridging.  With iptables
> shutdown the bridge works fine but even with very simple iptables
> rules any network connections to/from or through the bridge fail.
> 
> (Fedora kernels are patched so it''s difficult to say which
standard
> kernel version they correspond to but it looks like some new kernel
> patch has caused or will cause problems with bridge-nf).
> 
> --
> Ian
> 
seems to be a bug on FC  Kernel (yet another annoyance ) 

:-)

Tom 
              I don''t run Fedora and have not experienced this problem.
However I have been following a problem with kernel 2.6.12  and connection 
tracking on bridges. The problem was raised on the Netfilter development 
mailing list on 18th June with a title of "2.6.12: connection tracking 
broken?"

Steven.