lkml.org 
[lkml]   [2005]   [Jun]   [18]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: 2.6.12: connection tracking broken?
    On 6/18/05, Jan Engelhardt <jengelh@linux01.gwdg.de> wrote:
    > >I have just tried upgrading my firewall to 2.6.12, but neither of the following rules in my
    > >FORWARD table was allowing return traffic:
    >
    > You forget about INPUT and OUTPUT. If you drop everything in INPUT, there's
    > nothing to FORWARD.

    No. INPUT/OUTPUT rules have nothing to do with FORWARDed traffic,
    since a packet is either locally destined (INPUT), locally originated
    (OUTPUT) or being forwarded (FORWARD).

    > > 1109 814K ACCEPT all -- ppp0 br0 anywhere anywhere ctstate
    > >RELATED,ESTABLISHED
    > > 11M 13G ACCEPT all -- ppp0 br0 anywhere anywhere state
    > >RELATED,ESTABLISHED
    > >
    > >I have currently returned to using 2.6.11.11, where the identical configuration works fine. br0 is
    > >a bridge device containing two e100 devices, and ppp0 is my PPPoE DSL link. I am using iptables
    > >1.3.1.

    Did you have /proc/sys/net/ipv4/ip_forward turned on?

    --
    [ Tobias DiPasquale ]
    0x636f6465736c696e67657240676d61696c2e636f6d
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-06-18 17:18    [W:3.433 / U:0.072 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site