similar to: [Bug 1437] New: Social media marketing data

https://bugzilla.netfilter.org/show_bug.cgi?id=1245 Bug ID: 1245 Summary: Connection tracker fails to connect Product: conntrack-tools Version: 0.9.6 Hardware: All OS: All Status: NEW Severity: blocker Priority: P5 Component: conntrack-daemon Assignee: netfilter-buglog at

http://bugzilla.netfilter.org/show_bug.cgi?id=792 Summary: ip_conntrack keep updating incorrect entry in conntrack table after default routing changed Product: netfilter/iptables Version: linux-2.6.x Platform: x86_64 OS/Version: Fedora Status: NEW Severity: minor Priority: P5 Component:

https://bugzilla.netfilter.org/show_bug.cgi?id=1128 Bug ID: 1128 Summary: ip6_tables connmark or connlabel never matches Product: netfilter/iptables Version: unspecified Hardware: x86_64 OS: SuSE Linux Status: NEW Severity: normal Priority: P5 Component: ip6_tables (kernel)

https://bugzilla.netfilter.org/show_bug.cgi?id=1423 Bug ID: 1423 Summary: iptables-translate silently discards --ctstate DNAT Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: iptables over nftable

https://bugzilla.netfilter.org/show_bug.cgi?id=1244 Bug ID: 1244 Summary: Connection tracker fails to connect Product: conntrack-tools Version: 0.9.6 Hardware: All OS: All Status: NEW Severity: blocker Priority: P5 Component: conntrack-daemon Assignee: netfilter-buglog at

http://bugzilla.netfilter.org/show_bug.cgi?id=789 Summary: ulog_ct loses outputentries Product: ulogd Version: SVN (please provide timestamp) Platform: i386 OS/Version: Debian GNU/Linux Status: NEW Severity: major Priority: P5 Component: ulogd AssignedTo: netfilter-buglog at lists.netfilter.org

https://bugzilla.netfilter.org/show_bug.cgi?id=1246 Bug ID: 1246 Summary: Log Product: libnetfilter_log Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: libnetfilter_log Assignee: netfilter-buglog at lists.netfilter.org

https://bugzilla.netfilter.org/show_bug.cgi?id=1191 Bug ID: 1191 Summary: Empty parameters generate errors on iptables-restore, even when saved by iptables-save Product: iptables Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5

Typically (or at least somewhat occasionally) after a reboot of my shorewall[-lite] machine I find that I end up with conntrack table entries for unNATted connections such as: # conntrack -L -p udp --dport 5060 -d 99.232.11.14 udp 17 59 src=10.75.22.8 dst=99.232.11.14 sport=5060 dport=5060 packets=5472 bytes=3031488 [UNREPLIED] src=99.232.11.14 dst=10.75.22.8 sport=5060 dport=5060 packets=0

Rowland, Did some editing in smb.conf that I had to reverse. Now I'm back to being able to connect with the firewall disabled. When I enable the firewall I get as far as windows network -> workgroup but no connection. I have only the rules you recommended in your last email. Louis, The information you requested is below: martin at radio:~$ dpkg -l|egrep "iptables|ufw" ii 

https://bugzilla.netfilter.org/show_bug.cgi?id=1680 Bug ID: 1680 Summary: Trying to delete offloaded flow with conntrack results in EBUSY Product: nftables Version: unspecified Hardware: All OS: other Status: NEW Severity: major Priority: P5 Component: kernel

https://bugzilla.netfilter.org/show_bug.cgi?id=882 Summary: The conntrack-tools archive contains some leftovers from a patch run Product: conntrack-tools Version: unspecified Platform: All OS/Version: All Status: NEW Severity: trivial Priority: P5 Component: conntrack-daemon

Rowland, OK. Should I delete these lines? diff yours mine 63d62 yours# -A ufw-after-logging-output -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW ALLOW] " 85,87d83 yours# -A ufw-before-logging-forward -m conntrack --ctstate NEW -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW AUDIT] " yours# -A ufw-before-logging-input -m conntrack

Hi! The Netfilter project proudly presents: conntrack-tools 1.2.0 This release is a major milestone that includes support for expectation synchronization and the new nfct utility that, by now, only supports the new cttimeout infrastructure. See ChangeLog that comes attached to this email for more details. You can download it from:

hi i would like to use conntrack_tools on my centos server. i use the rpms from centalt but when i launch conntrack -C I got conntrack v0.9.13 (conntrack-tools): Can't open /proc/sys/net/netfilter/nf_conntrack_count Does someone already succeed in using it? Thanks in advance for any answer

Hi?guys. There is a wierd problem with iptables recently, hopes somebody can help me. I have installed Centos 7.2.1511 on a bare metal Dell server these days, disabled firewalld and enabled iptables.services, and setup a group of very simple rules, as the following: # iptables-save # Generated by iptables-save v1.4.21 on Tue Apr 23 09:15:14 2019 *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT

Louis, Made the changes. Still unable to mount office. Firewall also blocks Thunderbird mail and maybe internet. Will check that more fully later.Any thoughts ob Tony's response? Outputs: martin at radio:/etc$ sudo apt-get install ufw Reading package lists... Done Building dependency tree Reading state information... Done The following packages were automatically installed and are no

Hello, Stephen, thank you for input. Yes, these servers have the same firewall rules, and both of them have the same problem from time to time, most of time they are good. Actually, these servers are newly installed to be used as the Glusterfs storage server, so not much data flowing at this time. >From the sysctl output, I suppose it can't be a conntrack table overflow :

http://bugzilla.netfilter.org/show_bug.cgi?id=757 Summary: SIP connection helper not setting RTCP conntrack expectation Product: netfilter/iptables Version: linux-2.6.x Platform: i386 OS/Version: Ubuntu Status: NEW Severity: normal Priority: P5 Component: ip_conntrack

http://bugzilla.netfilter.org/show_bug.cgi?id=752 Summary: ipq_read() will return an error (rc = -1) and the error message says "Received truncated message" Product: iptables Version: 1.3.5 Platform: i386 OS/Version: RedHat Linux Status: NEW Severity: critical Priority: P1