similar to: [Bug 59] New: sparc64 conntrack issue with expecting related connections, FTP

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=41 Summary: pptp-conntrack-nat and sparc64 structures/padding/maskcomp bug Product: netfilter/iptables Version: patch-o-matic Platform: sparc64 OS/Version: All Status: NEW Severity: normal Priority: P2 Component: connection

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=59 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=495 Summary: Netfilter Connection Tracking Race Condition in Kernel 2.4.x Product: netfilter/iptables Version: linux-2.4.x Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: ip_conntrack

--mYCpIKhGyMATD0i+ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Netfilter Core Team Security Advisory =20 CVE: CAN-2003-0187 Subject: Netfilter / Connection Tracking Remote DoS Released: 01 Aug 2003 Effects: Any remote user may be able to DoS a machine

Hello, I need to understand how conntrack_core.c handles the termination of ''expected'' connection; handling in the case when ''expected'' connection arrived, then terminates (In my conntrack module, I need to specially handle the event of termination termination of ''expected'' connection.) In ip_conntrack_core.c, I can''t find the

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=64 ------- Additional Comments From tobias@portfolio16.de 2003-04-21 23:51 ------- Hi, I think I just found a problem with the patch... It was my fault to use a automatic build system and not check it... In the end the patch didn't apply in its whole and I didn't discover it, because the build system just went on.

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=56 Summary: super-long erroneous timeouts in conntrack table (semantics of list_del() change) Product: netfilter/iptables Version: linux-2.4.x Platform: other URL: http://lists.netfilter.org/pipermail/netfilter-

http://bugzilla.netfilter.org/show_bug.cgi?id=612 Summary: conntrack returns src, dst, dport and sport all zeroed Product: libnfnetlink Version: unspecified Platform: i386 OS/Version: other Status: NEW Severity: major Priority: P1 Component: libnfnetlink AssignedTo: laforge at netfilter.org

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=48 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED ------- Additional Comments From laforge@netfilter.org 2003-02-14 09:02 ------- This is a really hard

Hi! The netfilter project proudly presents: libnfnetlink-0.0.10 libnfnetlink_conntrack-0.0.10 conntrack-0.81 Each of those three releases is the first official release of the respective project. They're the counterparts to the first pieces of the "next generation" netfilter subsystem that will be present in the 2.6.14 linux kernel release. libnfnetlink is the low-level

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=64 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED ------- Additional Comments From laforge@netfilter.org 2003-03-16 09:36 ------- you seem to be running a

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=91 Summary: conntrack unload loops forever (reproducible) Product: netfilter/iptables Version: linux-2.4.x Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: connection tracking AssignedTo:

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448 Summary: IPv6 conntrack does not work on a tunnel interface Product: netfilter/iptables Version: unspecified Platform: All OS/Version: All Status: NEW Severity: major Priority: P2 Component: ip_conntrack AssignedTo: laforge@netfilter.org

http://bugzilla.netfilter.org/show_bug.cgi?id=610 Summary: conntrack doesn't work Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: All Status: NEW Severity: normal Priority: P1 Component: unknown AssignedTo: laforge at netfilter.org ReportedBy: urykhy at

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=11 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED ------- Additional Comments From

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=508 Summary: ip6tables conntrack marks all incoming packets as INVALID Product: netfilter/iptables Version: linux-2.6.x Platform: i386 OS/Version: Gentoo Status: NEW Severity: normal Priority: P2 Component: ip_conntrack

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=40 Summary: system hangs, Availability problems, maybe conntrack bug, possible reason here. Product: netfilter/iptables Version: linux-2.4.x Platform: i386 OS/Version: RedHat Linux Status: NEW Severity: critical Priority: P2

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=64 Summary: Conntrack-Table is not cleared on inferface down using target MASQUERADE Product: netfilter/iptables Version: linux-2.4.x Platform: i386 OS/Version: other Status: NEW Severity: normal Priority: P2 Component: NAT

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=40 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED ------- Additional Comments From laforge@netfilter.org

--k1lZvvs/B4yU6o8G Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi! It is my duty to inform you about this very unfortunate security issue in the IRC DCC connection tracking code. The following mail has just been sent to bugtraq, Linux Vendors have been informed two weeks in advance in order to prepare their advisories.