[Bug 1766] nfqueue randomly drops packets with same tuple

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Wed Sep 18 11:33:12 CEST 2024


https://bugzilla.netfilter.org/show_bug.cgi?id=1766

--- Comment #10 from Antonio Ojea <antonio.ojea.garcia at gmail.com> ---
@pablo I'm rereading 368982cd7d1bd41cd39049c794990aca3770db44 , and the problem
comes with 

> NAT mangling for the packet losing race is corrected by using the conntrack information that won race.

I don't have enough knowledge on the codebase to fully understand all the
logic, but I think the problems comes because the packet is enqueued in
postrouting and the NAT is redone ... but IIUIC is not considering the hook
from when the function is called, so it redoes all the NAT, in this case the
PREROUTING NAT.

What if it ONLY redoes the part of NAT that belongs to the hook where is this
called, is that possible? does it make sense?

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20240918/4597ba99/attachment-0001.html>


More information about the netfilter-buglog mailing list