similar to: a dynamic nat problem

Hello I have some rules inserted in the NAT table dual SNAT and DNAT for a connection They use at some moment the same port of the outside network. The problem i have is that the connection tracking in the kernel checks first the oldest rule and then the newest one. I use a system based on ARM XScale processor. Is that the default behaviour and how can i change this behaviour? Marius

> Send LARTC mailing list submissions to > lartc@mailman.ds9a.nl > > To subscribe or unsubscribe via the World Wide Web, visit > http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc > or, via email, send a message with subject or body ''help'' to > lartc-request@mailman.ds9a.nl > > You can reach the person managing the list at >

Even on a i386 machine for a very simple qdisc i get this error answer: RTNETLINK answers: Invalid argument what are the options in the kernel that i have to choose to escape this error? I really know nothing about netlink sockets, what they are, where they are in the kernel, what should i do. please help. Thank you in advance, Marius Corici

I have a router with only one physical ethernet cable. I know it''s stupid, but it is the network I have to use for a demo. I have in mind to construct an HTB class tree for some network limitations for the outgoing traffic. The question is: can i use the HTB class mechanism on 2 subinterfaces of the same physical network card without any interference? Please let me know as soon as

hello, is there any tool to support IPv6 in IPv6 or IPv6 in UDP over IPv6 out of the box solution (preferably :P)? Greetings, Marius Corici _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

hello, i have a 5500 iPaq with familiar 0.8.2 on it and i don''t know how to install a traffic shaper tool on it. I installed iproute2 package i found on familiar site and for that i have the tc and ip commands, but when trying to add a qdisc, as a dummy example, i get the next answer: > tc qdisc add dev wlan0 root cbq bandwidth 100Mbit avpkt 100 RTNETLINK answers: Invalid argument

hi, > > i am working on the diffserv implementation in linux. > i am new to this work and first time i am working on red hat along > with diffserv tech. > > i have compiled my kernel with the proper compilation of the >

https://bugzilla.netfilter.org/show_bug.cgi?id=1289 Bug ID: 1289 Summary: iptables build fails with kernel 4.20-rc1 - gnu_inline attributes Product: iptables Version: unspecified Hardware: x86_64 OS: Ubuntu Status: NEW Severity: normal Priority: P5 Component:

https://bugzilla.netfilter.org/show_bug.cgi?id=1067 Bug ID: 1067 Summary: Compilation failure on Linux 4.5.x when including libiptc/libiptc.h Product: iptables Version: 1.4.x Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: iptables

https://bugzilla.netfilter.org/show_bug.cgi?id=1275 Bug ID: 1275 Summary: if IPTC_DEBUG is defined, compiler reports errors Product: iptables Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: libiptc Assignee: netfilter-buglog

I have two questions about the raw table of the iptables. 1. in all the documentation it is said that the packages with the target NOTRACK will not be connection tracked. Do they pass through the nat tables. Can I make on them SNAT or DNAT? 2. if a rule from the raw table is deleted, the flow that went to that rule will be conntracked by nat afterwards or not? Marius

http://bugzilla.netfilter.org/show_bug.cgi?id=638 Summary: make libiptc a public interface Product: iptables Version: unspecified Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P3 Component: libiptc AssignedTo: netfilter-buglog at lists.netfilter.org ReportedBy:

https://bugzilla.netfilter.org/show_bug.cgi?id=826 Summary: libiptc/libip6tc.h doesn't specify C linkage Product: iptables Version: unspecified Platform: All OS/Version: All Status: NEW Severity: minor Priority: P5 Component: libiptc AssignedTo: netfilter-buglog at lists.netfilter.org

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=102 Summary: ipv6_prefix_length works only on LITTLE_ENDIAN and prefix_length % 8 == 0 Product: iptables userspace Version: 1.2.8 Platform: other OS/Version: All Status: NEW Severity: minor Priority: P2 Component: libiptc

Hi. there is a way to MARK udp VOIP (SIP) traffic, in order to put in a highest prio class ? Traffic flow seems start on udp 5060 port, but next both server and client seems jump to a random(?) port. I can''t use CONNMARK because is udp traffic. I only see a pattern for L7 patch in order to SIP traffic identification , but I run 2.4 kernel series . When you patch 2.4 kernel with

Is there any library that i can hook on at runtime in order to create a qdisc dinamically from a program or if i want to do this I have to call the "tc" command? The disadvantage of calling the tc command from a process is that it creates an other process and this slows things up. Marius

https://bugzilla.netfilter.org/show_bug.cgi?id=1291 Bug ID: 1291 Summary: iptables 1.8.0+ no longer builds against kernel 3.10.108 Product: iptables Version: unspecified Hardware: arm OS: other Status: NEW Severity: normal Priority: P5 Component: iptables

Hello all, I have a qos system that is working fine with my present dedicated bandwidth.Now I need to move on to another ISP provider that gives me opportunity to burst my bandwidth when there is less contention. I want to incorporate the bursting advantage in to my script but do not know how. Please , can somebody help with what I need to do to make this possible ? Thanks. -Ibrahim

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=438 Summary: lipiptc development headers installed by default Product: iptables Version: unspecified Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P2 Component: libiptc AssignedTo: laforge@netfilter.org

http://bugzilla.netfilter.org/show_bug.cgi?id=569 Summary: in6addr_any undeclared Product: iptables Version: CVS (please indicate timestamp) Platform: All OS/Version: All Status: NEW Severity: blocker Priority: P1 Component: unknown AssignedTo: laforge at netfilter.org ReportedBy: