Messages in this thread | | | Date | Sat, 18 Jun 2005 16:57:49 +0200 (MEST) | From | Jan Engelhardt <> | Subject | Re: 2.6.12: connection tracking broken? |
| |
>Hi, > >I have just tried upgrading my firewall to 2.6.12, but neither of the following rules in my >FORWARD table was allowing return traffic:
You forget about INPUT and OUTPUT. If you drop everything in INPUT, there's nothing to FORWARD.
> 1109 814K ACCEPT all -- ppp0 br0 anywhere anywhere ctstate >RELATED,ESTABLISHED > 11M 13G ACCEPT all -- ppp0 br0 anywhere anywhere state >RELATED,ESTABLISHED > >I have currently returned to using 2.6.11.11, where the identical configuration works fine. br0 is >a bridge device containing two e100 devices, and ppp0 is my PPPoE DSL link. I am using iptables >1.3.1.
Jan Engelhardt -- | Gesellschaft fuer Wissenschaftliche Datenverarbeitung Goettingen, | Am Fassberg, 37077 Goettingen, www.gwdg.de - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |