similar to: [Bug 72] ICMPs sent by REJECT are not getting SNAT'd

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=72 Summary: ICMPs sent by REJECT are not getting SNAT'd Product: netfilter/iptables Version: linux-2.4.x Platform: i386 OS/Version: RedHat Linux Status: NEW Severity: normal Priority: P2 Component: NAT AssignedTo:

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=73 netfilter@taner.net changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |DUPLICATE ------- Additional Comments From

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=73 Summary: ICMPs sent by REJECT are not getting SNAT'd Product: netfilter/iptables Version: linux-2.4.x Platform: i386 OS/Version: RedHat Linux Status: NEW Severity: normal Priority: P2 Component: NAT AssignedTo:

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=72 gandalf@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |INVALID ------- Additional Comments From gandalf@netfilter.org

https://bugzilla.netfilter.org/show_bug.cgi?id=993 Bug ID: 993 Summary: nft produces incorrect output when a reject rule is added using nft -f Product: nftables Version: unspecified Hardware: x86_64 OS: Fedora Status: NEW Severity: normal Priority: P5 Component: nft

https://bugzilla.netfilter.org/show_bug.cgi?id=1298 Bug ID: 1298 Summary: Issue with REJECT in custom chains Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: iptables over nftable Assignee: pablo

https://bugzilla.netfilter.org/show_bug.cgi?id=988 Bug ID: 988 Summary: manpage: mention that REJECT should be used with care Product: iptables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: iptables Assignee:

https://bugzilla.netfilter.org/show_bug.cgi?id=926 Summary: icmp: ICMPv6 types are not supported Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: nft AssignedTo: pablo at netfilter.org ReportedBy:

http://bugzilla.netfilter.org/show_bug.cgi?id=808 Summary: Wrong packet and byte counters when using DROP/REJECT targets and UDP protocol match Product: iptables Version: unspecified Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: iptables

https://bugzilla.netfilter.org/show_bug.cgi?id=531 Phil Oester <netfilter at linuxace.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |netfilter at linuxace.com AssignedTo|kaber at trash.net |netfilter-buglog at lists.netf

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=66 ------- Additional Comments From laforge@netfilter.org 2003-03-20 11:00 ------- what kernel are you running? which patches (from patch-o-matic) did you apply? please give us some more information :) ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

https://bugzilla.netfilter.org/show_bug.cgi?id=696 Phil Oester <netfilter at linuxace.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |netfilter at linuxace.com --- Comment #2 from Phil Oester <netfilter at linuxace.com> 2013-06-20

https://bugzilla.netfilter.org/show_bug.cgi?id=925 Summary: icmp: ICMPv4 types are not supported Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: nft AssignedTo: pablo at netfilter.org ReportedBy:

https://bugzilla.netfilter.org/show_bug.cgi?id=837 Summary: Large ICMP packets are lost Product: libnetfilter_queue Version: unspecified Platform: x86_64 OS/Version: other Status: NEW Severity: normal Priority: P5 Component: libnetfilter_queue AssignedTo: netfilter-buglog at lists.netfilter.org

https://bugzilla.netfilter.org/show_bug.cgi?id=696 --- Comment #4 from Phil Oester <netfilter at linuxace.com> 2013-06-21 20:09:31 CEST --- > The kernel manages the seq and > ack_seq counters itself, so it doesn't have to try ...for locally terminated connections, yes. But what about forwarded traffic? That is where the difficulty comes in. Netfilter would need to be able to

https://bugzilla.netfilter.org/show_bug.cgi?id=531 Phil Oester <netfilter at linuxace.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #2 from Phil Oester <netfilter

https://bugzilla.netfilter.org/show_bug.cgi?id=696 --- Comment #5 from Alessandro Vesely <vesely at tana.it> 2013-06-22 10:05:55 CEST --- (In reply to comment #4) >> The kernel manages the seq and ack_seq counters itself, so it doesn't have >> to try > > ...for locally terminated connections, yes. But what about forwarded traffic? > That is where the difficulty

https://bugzilla.netfilter.org/show_bug.cgi?id=1412 Bug ID: 1412 Summary: ip6tables-nft not accepting "icmp" as shorthand for "icmpv6" Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: minor Priority: P5

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=55 Summary: ICMP translation problem with local NAT Product: netfilter/iptables Version: linux-2.4.x Platform: other OS/Version: other Status: NEW Severity: normal Priority: P2 Component: NAT AssignedTo: laforge@netfilter.org

http://bugzilla.netfilter.org/show_bug.cgi?id=706 Jan Engelhardt <jengelh at medozas.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jengelh at medozas.de --- Comment #1 from Jan Engelhardt <jengelh at medozas.de> 2011-03-03 14:20:30