ppooe state RELATED,ESTABLISHED issue
tedkaz at optonline.net
Fri Aug 5 02:30:15 CEST 2005
Today I was testing a Centos 4.1(RH ES4 clone) with 2.6.9-11.EL and a
Verizon dsl connection. I couldn't get any connection tracking related
rules working on the pppoe interface.
-A INPUT -i ppp0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i ppp0 -m state --state RELATED,ESTABLISHED -j ACCEPT
The only way I could get it to forward traffic
was to allow all INPUT and FORWARD traffic for ppp0.
The pppoe is using eth0 and the inside interface is eth1.
Googling uncovered a thread with respect to connection tracking being
Is this really the same issue? If packets are coming in eth1 and leaving
are they not just being routed? If eth0 is up the I can see packets
being bridged from ppp0e to eth0, but with eth0 down I am at a loss as
to why this is happening.
Also is this issue specific to 2.6? A 2.4 based machine would likely
suffice in this application.
More information about the netfilter