[Bug 1743] Flowtable: Flows exiting OFFLOAD State being assigned value of nf_conntrack_tcp_timeout_unacknowledged

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Wed May 1 00:29:08 CEST 2024


https://bugzilla.netfilter.org/show_bug.cgi?id=1743

--- Comment #3 from Tim Harman <tim at muppetz.com> ---
I have recently moved ISPs.
My old ISP required PPPoE, my new ISP doesn't (uses DHCP)
Since moving to my new ISP, I have been 100% unable to reproduce this problem.
My easy-to-reproduce test before I have tried 100 times and I can't reproduce
it.

I wonder if the issue that I was encountering was related to this fix I see in
6.6.29, and moving away from PPPoE has stopped the problem from appearing?

---- begin ----

ommit 4ed82dd368ad883dc4284292937b882f044e625d
Author: Pablo Neira Ayuso <pablo at netfilter.org>
Date:   Thu Apr 11 00:09:00 2024 +0200

    netfilter: flowtable: incorrect pppoe tuple

    [ Upstream commit 6db5dc7b351b9569940cd1cf445e237c42cd6d27 ]

    pppoe traffic reaching ingress path does not match the flowtable entry
    because the pppoe header is expected to be at the network header offset.
    This bug causes a mismatch in the flow table lookup, so pppoe packets
    enter the classical forwarding path.

--- end ----

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20240430/655177f9/attachment.html>


More information about the netfilter-buglog mailing list