[Bug 1674] ebtables causing packet loss

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1674

Phil Sutter <phil at nwl.cc> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |phil at nwl.cc

--- Comment #3 from Phil Sutter <phil at nwl.cc> ---
(In reply to ryder1ross from comment #0)
> I am using AlmaLinux 8 on a dedicated server and hosting VPSes using KVM.
> Applying ebtables rules on those VPSes is causing packet loss issue.

What are the precise symptoms? Just some traffic lost, no connectivity at all?

> Bridge chain: v1001, entries: 1, policy: DROP -p IPv4 -s 00:xx:xx:52:69:ac
> --ip-src 192.168.122.204 -j ACCEPT
> 
> Bridge chain: v1001IPV6, entries: 0, policy: DROP
> 
> Bridge chain: v1001ARPIN, entries: 2, policy: ACCEPT -p ARP --arp-ip-src
> 192.168.122.204 --arp-mac-src 00:xx:xx:52:69:ac -j ACCEPT -p ARP -j DROP

Are you aware that not all ARP traffic may have a source IP address set?

> There are around 100 VPSes hosted. Applying/loading rules for all those
> VPSes all at once would cause issues ?

Cause issues other than packet loss? If not, does packet loss occur only if you
apply the rules to all VPS or for a single one also?

> Where else can I check for logs ?

You could add '--log' to the rules dropping packets and check dmesg.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20230426/768d6bbe/attachment.html>