Re: 2.6.12 netfilter: local packets marked as invalid

2005-07-12 Thread Chris Wright
* Patrick McHardy ([EMAIL PROTECTED]) wrote: > Chris Wright wrote: > >* David S. Miller ([EMAIL PROTECTED]) wrote: > > > >>Now the question is what to do about the 2.6.12.x stable > >>tree. I think we put the offending change there, now we > >>need to revert it there too. Patrick, could you push

Re: 2.6.12 netfilter: local packets marked as invalid

2005-07-12 Thread Patrick McHardy
Chris Wright wrote: * David S. Miller ([EMAIL PROTECTED]) wrote: Now the question is what to do about the 2.6.12.x stable tree. I think we put the offending change there, now we need to revert it there too. Patrick, could you push this patch to [EMAIL PROTECTED] so we can resolve that too?

Re: 2.6.12 netfilter: local packets marked as invalid

2005-07-12 Thread Chris Wright
* David S. Miller ([EMAIL PROTECTED]) wrote: > From: Patrick McHardy <[EMAIL PROTECTED]> > Date: Tue, 12 Jul 2005 13:58:27 +0200 > > > Daniel Drake wrote: > > > You'll have to forgive my lack of netfilter knowledge, I set up my > > > firewall > > > ages ago and haven't really touched it since :)

Re: 2.6.12 netfilter: local packets marked as invalid

2005-07-12 Thread David S. Miller
From: Patrick McHardy <[EMAIL PROTECTED]> Date: Tue, 12 Jul 2005 13:58:27 +0200 > Daniel Drake wrote: > > You'll have to forgive my lack of netfilter knowledge, I set up my firewall > > ages ago and haven't really touched it since :) > > We decided to revert the responsible change because it

Re: 2.6.12 netfilter: local packets marked as invalid

2005-07-12 Thread Daniel Drake
Patrick McHardy wrote: > We decided to revert the responsible change because it caused problems > in other areas as well. This patch should fix your problem. Thanks, it works. If you decide to revisit this in the future, feel free to send me a patch and I will help test it. Daniel - To

Re: 2.6.12 netfilter: local packets marked as invalid

2005-07-12 Thread Patrick McHardy
Daniel Drake wrote: You'll have to forgive my lack of netfilter knowledge, I set up my firewall ages ago and haven't really touched it since :) We decided to revert the responsible change because it caused problems in other areas as well. This patch should fix your problem. [NETFILTER]:

Re: 2.6.12 netfilter: local packets marked as invalid

2005-07-12 Thread Patrick McHardy
Chris Wright wrote: * David S. Miller ([EMAIL PROTECTED]) wrote: Now the question is what to do about the 2.6.12.x stable tree. I think we put the offending change there, now we need to revert it there too. Patrick, could you push this patch to [EMAIL PROTECTED] so we can resolve that too?

Re: 2.6.12 netfilter: local packets marked as invalid

2005-07-12 Thread Chris Wright
* Patrick McHardy ([EMAIL PROTECTED]) wrote: Chris Wright wrote: * David S. Miller ([EMAIL PROTECTED]) wrote: Now the question is what to do about the 2.6.12.x stable tree. I think we put the offending change there, now we need to revert it there too. Patrick, could you push this patch

Re: 2.6.12 netfilter: local packets marked as invalid

2005-07-12 Thread Patrick McHardy
Daniel Drake wrote: You'll have to forgive my lack of netfilter knowledge, I set up my firewall ages ago and haven't really touched it since :) We decided to revert the responsible change because it caused problems in other areas as well. This patch should fix your problem. [NETFILTER]:

Re: 2.6.12 netfilter: local packets marked as invalid

2005-07-12 Thread Daniel Drake
Patrick McHardy wrote: We decided to revert the responsible change because it caused problems in other areas as well. This patch should fix your problem. Thanks, it works. If you decide to revisit this in the future, feel free to send me a patch and I will help test it. Daniel - To unsubscribe

Re: 2.6.12 netfilter: local packets marked as invalid

2005-07-12 Thread David S. Miller
From: Patrick McHardy [EMAIL PROTECTED] Date: Tue, 12 Jul 2005 13:58:27 +0200 Daniel Drake wrote: You'll have to forgive my lack of netfilter knowledge, I set up my firewall ages ago and haven't really touched it since :) We decided to revert the responsible change because it caused

Re: 2.6.12 netfilter: local packets marked as invalid

2005-07-12 Thread Chris Wright
* David S. Miller ([EMAIL PROTECTED]) wrote: From: Patrick McHardy [EMAIL PROTECTED] Date: Tue, 12 Jul 2005 13:58:27 +0200 Daniel Drake wrote: You'll have to forgive my lack of netfilter knowledge, I set up my firewall ages ago and haven't really touched it since :) We decided

Re: 2.6.12 netfilter: local packets marked as invalid

2005-07-08 Thread Daniel Drake
Patrick McHardy wrote: > You could confirm this theory by logging invalid packets in LOCAL_OUT > and in PRE_ROUTING - only PRE_ROUTING should trigger. I'm going to > think about a solution meanwhile. You'll have to forgive my lack of netfilter knowledge, I set up my firewall ages ago and haven't

Re: 2.6.12 netfilter: local packets marked as invalid

2005-07-08 Thread Patrick McHardy
Daniel Drake wrote: When retrying the telnet test, this appears in the logs: Jul 8 14:53:04 dsd inv IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=40 TOS=0x10 PREC=0x00 TTL=64 ID=15 DF PROTO=TCP SPT=80 DPT=58950 WINDOW=0 RES=0x00 ACK RST URGP=0 Does

2.6.12 netfilter: local packets marked as invalid

2005-07-08 Thread Daniel Drake
Hi, Some Gentoo users have reported very long application startup times in 2.6.12. This seems to be because the applications are attempting to connect to local ports such as sunrpc/portmap (where these services are not running), but some packets are being dropped, so the application load just

2.6.12 netfilter: local packets marked as invalid

2005-07-08 Thread Daniel Drake
Hi, Some Gentoo users have reported very long application startup times in 2.6.12. This seems to be because the applications are attempting to connect to local ports such as sunrpc/portmap (where these services are not running), but some packets are being dropped, so the application load just

Re: 2.6.12 netfilter: local packets marked as invalid

2005-07-08 Thread Patrick McHardy
Daniel Drake wrote: When retrying the telnet test, this appears in the logs: Jul 8 14:53:04 dsd inv IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=40 TOS=0x10 PREC=0x00 TTL=64 ID=15 DF PROTO=TCP SPT=80 DPT=58950 WINDOW=0 RES=0x00 ACK RST URGP=0 Does

Re: 2.6.12 netfilter: local packets marked as invalid

2005-07-08 Thread Daniel Drake
Patrick McHardy wrote: You could confirm this theory by logging invalid packets in LOCAL_OUT and in PRE_ROUTING - only PRE_ROUTING should trigger. I'm going to think about a solution meanwhile. You'll have to forgive my lack of netfilter knowledge, I set up my firewall ages ago and haven't