[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#425462: NAT prerouting over tun interface broken



(CC maintainer of procps as a heads-up)

On Monday 21 May 2007 22:36, Frans Pop wrote:
> My hercules s/390 emulator no longer receives packets sent from other
> boxes to the external IP address it has on the host system. It appears
> that iptables prerouting is broken somehow.

Update on this issue (more details in upstream BR).

The cause of the change in behavior has been traced to the following 
upstream commit: 8030f54499925d073a88c09f30d5d844fb1b3190

Somehow this causes default ipv4 settings defined in /etc/sysctl.conf to 
no longer be applied to eth0.

In my /etc/sysctl.conf I have:
net.ipv4.conf.default.rp_filter=1
net.ipv4.conf.default.forwarding=1

But after booting with a kernel with that change, these values are no 
longer applied for eth0:
$ cat /proc/sys/net/ipv4/conf/eth0/rp_filter:
0
$ cat /proc/sys/net/ipv4/conf/eth0/forwarding:
0

Attachment: pgpEcF4ulRvRz.pgp
Description: PGP signature


Reply to: