Re: [PATCH] Fix erroneous ICMP corruption with iptable_nat and NOTRACK

2005-08-08 Thread David S. Miller
From: Harald Welte <[EMAIL PROTECTED]> Date: Mon, 8 Aug 2005 11:50:55 +0200 > DaveM is probably travelling back from UKUUG at the moment and therefore > wasn't able to push this fix to you. I'm actually back and operational as of this morning :-) I'll push this stuff to Linus later today. So Li

[PATCH] Fix erroneous ICMP corruption with iptable_nat and NOTRACK (was Re: ICMP broken in 2.6.13-rc5)

2005-08-08 Thread Harald Welte
Hi Linus! DaveM is probably travelling back from UKUUG at the moment and therefore wasn't able to push this fix to you. The following trivial patch is confirmed to solve an ICMP corruption problem if NAT and the NOTRACK target are used together. Please apply before 2.6.13 is released. Thanks,

Re: [PATCH] Fix erroneous ICMP corruption with iptable_nat and NOTRACK (was Re: ICMP broken in 2.6.13-rc5)

2005-08-08 Thread Harald Welte
[ Cleaning up Cc list ] On Mon, Aug 08, 2005 at 12:34:00AM +0200, Patrick McHardy wrote: > > Looking at the latest traces Vladimir sent me, there is another case, > > too. > > Yes, but nat_packet checks if manips have actually been set up before > touching the packet. This can never happen for t

Re: [PATCH] Fix erroneous ICMP corruption with iptable_nat and NOTRACK (was Re: ICMP broken in 2.6.13-rc5)

2005-08-07 Thread Patrick McHardy
Harald Welte wrote: > On Sun, Aug 07, 2005 at 08:42:56PM +0200, Patrick McHardy wrote: > >>The conntrack reference is manually attached to locally generated ICMP >>errors and icmp_reply_translation() doesn't check if NAT mappings have >>been set up but simply replaces IP/port by what is stored in

Re: [PATCH] Fix erroneous ICMP corruption with iptable_nat and NOTRACK (was Re: ICMP broken in 2.6.13-rc5)

2005-08-07 Thread Harald Welte
On Sun, Aug 07, 2005 at 08:42:56PM +0200, Patrick McHardy wrote: > Harald Welte wrote: > > On Sun, Aug 07, 2005 at 05:18:06PM +0200, Harald Welte wrote: > > > >>The following trivial patch was confirmed to solve the problem. Patrick > >>also has no objections, so please apply this to mainline. >

Re: [PATCH] Fix erroneous ICMP corruption with iptable_nat and NOTRACK (was Re: ICMP broken in 2.6.13-rc5)

2005-08-07 Thread Patrick McHardy
Harald Welte wrote: > On Sun, Aug 07, 2005 at 05:18:06PM +0200, Harald Welte wrote: > >>The following trivial patch was confirmed to solve the problem. Patrick >>also has no objections, so please apply this to mainline. > > Please hold it back for another minute. I'm still puzzled by this > pro

Re: [PATCH] Fix erroneous ICMP corruption with iptable_nat and NOTRACK (was Re: ICMP broken in 2.6.13-rc5)

2005-08-07 Thread Vladimir B. Savkin
On Sun, Aug 07, 2005 at 06:44:15PM +0200, Harald Welte wrote: > On Sun, Aug 07, 2005 at 05:18:06PM +0200, Harald Welte wrote: > > Hi Dave! > > > > The following trivial patch was confirmed to solve the problem. Patrick > > also has no objections, so please apply this to mainline. > > Please hold

Re: [PATCH] Fix erroneous ICMP corruption with iptable_nat and NOTRACK (was Re: ICMP broken in 2.6.13-rc5)

2005-08-07 Thread Harald Welte
On Sun, Aug 07, 2005 at 05:18:06PM +0200, Harald Welte wrote: > Hi Dave! > > The following trivial patch was confirmed to solve the problem. Patrick > also has no objections, so please apply this to mainline. Please hold it back for another minute. I'm still puzzled by this problem. I can neit

[PATCH] Fix erroneous ICMP corruption with iptable_nat and NOTRACK (was Re: ICMP broken in 2.6.13-rc5)

2005-08-07 Thread Harald Welte
Hi Dave! The following trivial patch was confirmed to solve the problem. Patrick also has no objections, so please apply this to mainline. I'm undecided whether it should go into 2.6.12.x, since the problem only occurs in very rare usage cases. OTOTH, the fix is very trivial... so I leave it up