[Bug 71] dnat breaks connection tracking?

bugzilla-daemon@netfilter.org bugzilla-daemon@netfilter.org
Mon, 31 Mar 2003 02:22:25 +0200


https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=71





------- Additional Comments From mbm@alt.org  2003-03-31 02:22 -------
and some logs:

DNAT:IN=eth0 OUT= MAC=00:90:27:35:b6:13:00:20:78:c5:72:06:08:00 SRC=y.y.y.y
DST=192.168.1.2 LEN=52 TOS=0x10 PREC=0x00 TTL=51 ID=6246 DF PROTO=TCP SPT=40234
DPT=21 WINDOW=5840 RES=0x00 ACK FIN URGP=0 

DNAT:IN=eth0 OUT= MAC=00:90:27:35:b6:13:00:20:78:c5:72:06:08:00 SRC=y.y.y.y
DST=192.168.1.2 LEN=58 TOS=0x10 PREC=0x00 TTL=51 ID=6245 DF PROTO=TCP SPT=40234
DPT=21 WINDOW=5840 RES=0x00 ACK PSH URGP=0

DNAT:IN=eth0 OUT= MAC=00:90:27:35:b6:13:00:20:78:c5:72:06:08:00 SRC=y.y.y.y
DST=192.168.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=53374 DF PROTO=TCP SPT=40339
DPT=21 WINDOW=5840 RES=0x00 SYN URGP=0

conntrack_ftp: RECORDING: y.y.y.y => 24.x.x.x:32778

DNAT:IN=eth0 OUT= MAC=00:90:27:35:b6:13:00:20:78:c5:72:06:08:00 SRC=y.y.y.y
DST=192.168.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=50350 DF PROTO=TCP SPT=40349
DPT=32778 WINDOW=5840 RES=0x00 SYN URGP=0

REJECT:IN=eth0 OUT= MAC=00:90:27:35:b6:13:00:20:78:c5:72:06:08:00 SRC=y.y.y.y
DST=24.x.x.x LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=50350 DF PROTO=TCP SPT=40349
DPT=32778 WINDOW=5840 RES=0x00 SYN URGP=0

--- ip_conntrack_ftp.c.orig     2003-03-30 19:20:21.000000000 -0500
+++ ip_conntrack_ftp.c  2003-03-30 19:20:26.000000000 -0500
@@ -374,6 +374,10 @@
 
        exp->expectfn = NULL;
 
+       printk("conntrack_ftp: RECORDING: %u,%u,%u,%u => %u.%u.%u.%u:%d\n",
+                       NIPQUAD(ct->tuplehash[!dir].tuple.src.ip),
+                       NIPQUAD(ct->tuplehash[dir].tuple.src.ip),(array[4] << 8
| array[5]));
+
        /* Ignore failure; should only happen with NAT */
        ip_conntrack_expect_related(ct, &expect);
  out:




------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.