Messages in this thread | | | Date | Mon, 20 Jun 2005 04:45:15 +0200 (CEST) | From | Patrick McHardy <> | Subject | Re: 2.6.12: connection tracking broken? |
| |
On Mon, 20 Jun 2005, Herbert Xu wrote: > Patrick McHardy <kaber@trash.net> wrote: >> >> The bridge-netfilter code defers calling of some NF_IP_* hooks to the >> bridge layer, when the conntrack reference is already gone, so the entry > > Why does it defer them at all? Shouldn't the fact that the device is > bridged be transparent to the IP layer?
I couldn't figure out the reason, it seems to have something to do with setting up device pointers for iptables and ebtables. It looks like the only way to fix this problem without keeping the conntrack reference while packets are queued at the device is to avoid defering the NF_IP_* hooks. Bart, can you explain why the hooks are defered please?
Regards Patrick - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |