similar to: [Bug 70] udp connection(snmp) not being tracked.

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=70 Summary: udp connection(snmp) not being tracked. Product: netfilter/iptables Version: patch-o-matic Platform: All OS/Version: Debian GNU/Linux Status: NEW Severity: major Priority: P2 Component: connection tracking AssignedTo:

--k1lZvvs/B4yU6o8G Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi! It is my duty to inform you about this very unfortunate security issue in the IRC DCC connection tracking code. The following mail has just been sent to bugtraq, Linux Vendors have been informed two weeks in advance in order to prepare their advisories.

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=48 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED ------- Additional Comments From laforge@netfilter.org 2003-02-14 09:02 ------- This is a really hard

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=471 Summary: UDP stream DNAT problem Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: NAT AssignedTo: laforge@netfilter.org ReportedBy:

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=495 Summary: Netfilter Connection Tracking Race Condition in Kernel 2.4.x Product: netfilter/iptables Version: linux-2.4.x Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: ip_conntrack

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=56 Summary: super-long erroneous timeouts in conntrack table (semantics of list_del() change) Product: netfilter/iptables Version: linux-2.4.x Platform: other URL: http://lists.netfilter.org/pipermail/netfilter-

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=41 Summary: pptp-conntrack-nat and sparc64 structures/padding/maskcomp bug Product: netfilter/iptables Version: patch-o-matic Platform: sparc64 OS/Version: All Status: NEW Severity: normal Priority: P2 Component: connection

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=59 Summary: sparc64 conntrack issue with expecting related connections, FTP Product: netfilter/iptables Version: linux-2.4.x Platform: sparc64 OS/Version: other Status: NEW Severity: normal Priority: P2 Component:

--mYCpIKhGyMATD0i+ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Netfilter Core Team Security Advisory =20 CVE: CAN-2003-0187 Subject: Netfilter / Connection Tracking Remote DoS Released: 01 Aug 2003 Effects: Any remote user may be able to DoS a machine

http://bugzilla.netfilter.org/show_bug.cgi?id=612 Summary: conntrack returns src, dst, dport and sport all zeroed Product: libnfnetlink Version: unspecified Platform: i386 OS/Version: other Status: NEW Severity: major Priority: P1 Component: libnfnetlink AssignedTo: laforge at netfilter.org

Hi! The netfilter project proudly presents: libnfnetlink-0.0.10 libnfnetlink_conntrack-0.0.10 conntrack-0.81 Each of those three releases is the first official release of the respective project. They're the counterparts to the first pieces of the "next generation" netfilter subsystem that will be present in the 2.6.14 linux kernel release. libnfnetlink is the low-level

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=64 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED ------- Additional Comments From laforge@netfilter.org 2003-03-16 09:36 ------- you seem to be running a

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=91 Summary: conntrack unload loops forever (reproducible) Product: netfilter/iptables Version: linux-2.4.x Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: connection tracking AssignedTo:

Hi! Today the netfilter project released libnfnetlink-0.0.11 ftp://ftp.netfilter.org/pub/libnfnetlink/libnfnetlink-0.0.11.tar.bz2 This is the low-level communications library libnetfilter_log-0.0.10 ftp://ftp.netfilter.org/pub/libnetfilter_log/libnetfilter_log-0.0.10.tar.bz2 This is the userspace library for nfnetlink_log in 2.6.14 It is used by the upcoming ulogd-2.00beta release Needs

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=50 Summary: Kernel panic with netfilter Product: netfilter/iptables Version: patch-o-matic Platform: i386 OS/Version: All Status: NEW Severity: normal Priority: P2 Component: unknown AssignedTo: laforge@netfilter.org

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=105 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |LATER ------- Additional Comments From

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=522 Summary: SIP helper(?) mangles packets even when inactive Product: netfilter/iptables Version: linux-2.6.x Platform: x86_64 OS/Version: All Status: NEW Severity: normal Priority: P2 Component: unknown AssignedTo: laforge@netfilter.org

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448 Summary: IPv6 conntrack does not work on a tunnel interface Product: netfilter/iptables Version: unspecified Platform: All OS/Version: All Status: NEW Severity: major Priority: P2 Component: ip_conntrack AssignedTo: laforge@netfilter.org

http://bugzilla.netfilter.org/show_bug.cgi?id=610 Summary: conntrack doesn't work Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: All Status: NEW Severity: normal Priority: P1 Component: unknown AssignedTo: laforge at netfilter.org ReportedBy: urykhy at

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=71 ------- Additional Comments From laforge@netfilter.org 2003-03-30 21:18 ------- First of all: You didn't even specify the particular kernel version you are running, not even mentioning which versions of which patches you are using (if any). Secondly, I don't see anything strange in this setup. DNAT with FTP sessions