[PRERELEASE] 0.90.1

Marc Boucher marc@mbsi.ca
Fri, 18 Feb 2000 22:33:39 -0500


> This is what is going to get merged with Linus for 2.4: coders, if
> that's your aim, hack on this version, and do so soon (patches against
> this are worth double points 8-).
> 
> 	http://netfilter.kernelnotes.org/0.90/0.90.html
> 
> SMP fixed.  FTP fixed.  Conntrack expect callbacks (racy as all hell)
> replaced with minimalistic NAT expect stuff.
> 
> I'm posting through this one now. 8-)

Hi Rusty,

The new NAT expect stuff doesn't work here when MASQUERADing ftp
connections. The PORT command gets properly rewritten, but then the
incoming ftp-data SYN is rejected by the packet-filter.
ftp_nat_expected() is never called, because in ip_nat_rule_find()
ip_conntrack_master_get() returns NULL.

Are you aware of this problem? need more info? 

Marc