hivemynd at hivemynd.net
Tue Apr 4 16:39:50 CEST 2006
Patrick McHardy wrote:
> Stephen Jones wrote:
>>Patrick McHardy wrote:
>>>- pptp-conntrack-nat: in mainline now, patches are missing critical
>>Is pptp-conntrack-nat functionality going to be included in the 2.4.x
>>mainline also? Otherwise, the patches still appear to be necessary for
> No, 2.4 is in absolute stable mode. The pptp patches for 2.4 are missing
> a number of important bugfixes, I wouldn't recommend using them in their
> present form. We don't have the time to maintain old versions forever,
> which is why we decided to remove this old stuff.
Ok, good enough, and completely understandable. Unfortunately, for me,
there are still quite a few items (not netfilter related) that work on
2.4.x that do not yet work on 2.6.x series kernels that force me into a
holding pattern on the 2.4.3x kernels for now. I'll keep an archive of
the last known working iptables + pom-ng snapshot if I need to recompile
again in the future. The pptp conntrack functionality has been "mostly"
working for us for several years now. The problems with it are rare and
tend to occur when the linux firewall is managing many concurrent
tunnels, otherwise it appears to work just fine. Thank you for your reply.
More information about the netfilter-devel