more severe error in netfilter-0.1.6
Adam Kumiszcza
Qman@null.net
Fri, 3 Sep 1999 23:37:38 +0200
Besides the errors mentioned previously I found the following:
Some packets are dropped even if my firewall configuration
doesn't drop any packets (I have only -j LOGDROP, where
LOGDROP is defined as -j LOG and -j DROP for everything, but
there were no packets mentioned in DROP (checked with -L -n -v)).
The following is in my syslog:
[...]
Sep 3 23:21:26 psycho kernel: ip_tables: error: `'
Sep 3 23:21:26 psycho kernel: nf_iterate: NF_DROP for c3349e60.
[...]
(many of these)
After turning off firewall (with -F) everything comes back to normal,
but I noticed the following:
Sep 3 23:22:03 psycho kernel: tcp_v4_rebuild_header():
shifting sk->saddr from 192.168.66.6 to 212.160.44.8
As to my knowledge that means that firewall somehow blocked changing
the dynamic ip during ppp connection (this should happen at the very
beginning of the connection IMHO). Maybe that's the source of a problem?
Adam Kumiszcza
<Qman@NULL.net>
Ps. Sorry for the post with 'subscribe' in it...