ppooe state RELATED,ESTABLISHED issue

Ted Kaczmarek tedkaz at optonline.net
Fri Aug 5 02:30:15 CEST 2005

Today I was testing a Centos 4.1(RH ES4 clone) with  2.6.9-11.EL and a
Verizon dsl connection. I couldn't get any connection tracking related
rules working on the pppoe interface.

-A INPUT -i ppp0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i ppp0 -m state --state RELATED,ESTABLISHED -j ACCEPT

The only way I could get it to forward traffic 
was to allow all INPUT and FORWARD traffic for ppp0.

The pppoe is using eth0 and the inside interface is eth1.

Googling uncovered a thread with respect to connection tracking being
with bridging.


Is this really the same issue? If packets are coming in eth1 and leaving
ppp0(using eth0)
are they not just being routed? If eth0 is up the I can see packets
being bridged from ppp0e to eth0, but with eth0 down I am at a loss as
to why this is happening.

Also is this issue specific to 2.6? A 2.4 based machine would likely
suffice in this application.


More information about the netfilter mailing list