<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - 'DisableExternalCache On' seems to be broken"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1203">1203</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>'DisableExternalCache On' seems to be broken
</td>
</tr>
<tr>
<th>Product</th>
<td>conntrack-tools
</td>
</tr>
<tr>
<th>Version</th>
<td>unspecified
</td>
</tr>
<tr>
<th>Hardware</th>
<td>All
</td>
</tr>
<tr>
<th>OS</th>
<td>Ubuntu
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>P5
</td>
</tr>
<tr>
<th>Component</th>
<td>conntrack-daemon
</td>
</tr>
<tr>
<th>Assignee</th>
<td>netfilter-buglog@lists.netfilter.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>johanrp70@gmail.com
</td>
</tr></table>
<p>
<div>
<pre>Hi,
I have a setup with two firewalls in a VirtualBox environment and is trying to
run conntrackd in active-active mode (DisableExternalCache On).
root@gw1:~# conntrackd -v
Connection tracking userspace daemon v1.4.4. Licensed under GPLv2.
root@gw1:~# uname -a
Linux gw1 4.4.0-87-generic #110-Ubuntu SMP Tue Jul 18 12:55:35 UTC 2017 x86_64
x86_64 x86_64 GNU/Linux
I can se conntrack info in firewall-1 with 'conntrackd -i' and 'conntrack -L'.
But when I run the same commands in firewall-2 it's empty and and I can se this
in the logfile:
[Tue Nov 28 09:53:41 2017] (pid=2286) [ERROR] inject-add2: Invalid argument
Tue Nov 28 09:53:41 2017 udp 17 src=192.168.2.10 dst=y.y.y.y
sport=49898 dport=53 [UNREPLIED]
[Tue Nov 28 09:53:41 2017] (pid=2286) [ERROR] inject-upd1: Invalid argument
Tue Nov 28 09:53:41 2017 udp 17 src=192.168.2.10 dst=y.y.y.y
sport=49898 dport=53 [ASSURED]
[Tue Nov 28 09:53:41 2017] (pid=2286) [ERROR] inject-add2: Invalid argument
Tue Nov 28 09:53:41 2017 tcp 6 SYN_SENT src=192.168.2.10 dst=x.x.x.x
sport=39554 dport=443 [UNREPLIED]
[Tue Nov 28 09:53:41 2017] (pid=2286) [ERROR] inject-upd1: Invalid argument
Tue Nov 28 09:53:41 2017 tcp 6 SYN_RECV src=192.168.2.10 dst=x.x.x.x
sport=39554 dport=443
[Tue Nov 28 09:53:41 2017] (pid=2286) [ERROR] inject-upd1: Invalid argument
Tue Nov 28 09:53:41 2017 tcp 6 ESTABLISHED src=192.168.2.10 dst=x.x.x.x
sport=39554 dport=443 [ASSURED]
[Tue Nov 28 09:53:41 2017] (pid=2286) [ERROR] inject-upd1: Invalid argument
Tue Nov 28 09:53:41 2017 tcp 6 FIN_WAIT src=192.168.2.10 dst=x.x.x.x
sport=39554 dport=443 [ASSURED]
[Tue Nov 28 09:53:41 2017] (pid=2286) [ERROR] inject-upd1: Invalid argument
Tue Nov 28 09:53:41 2017 tcp 6 CLOSE src=192.168.2.10 dst=x.x.x.x
sport=39554 dport=443 [ASSURED]
Regards
/Johan</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>