Sorry, I missed your reply. On Fri, 2017-04-07 at 20:40 +0100, Ben Hutchings wrote: > Does the affected system have a firewall?
Yes, it does. > If so, you might need to > load nf_conntrack_proto_gre explicitly now (explained in > <https://home.regit.org/netfilter-en/secure-use-of-helpers/>). > Although it isn't obvious why only some of the GRE tunnels would be > affected. As it happens I load all nf_conntrack modules at boot so they are available to containers. I've just checked, nf_conntrack_proto_gre is definitely loaded. I'll try it again with 4.9.18.
signature.asc
Description: This is a digitally signed message part
