On Dec 20, 2007 11:06 AM, Patrick McHardy <kaber@xxxxxxxxx> wrote: > That actually looks like it works properly. > > New control connection: > > [...] > > New expectation for data connection: > > [...] > > New data connection machting expectation, both source and > destination properly NATed: > > [...] > > Data connection closed > > [...] > > Control connection closed > > [...] > > Both connections destroyed > Yes, when I'm using ip addresses with the same length, the conntrack -E output is similar, and it's working. But if I change the router's "wan"-side ip address to be longer or shorter than the client's ip address, then it's non-working again. I don't think it's something in the configuration : the results are present on two different computers, one being a x86 little endian debian laptop where I did the bisect, the other being an arm xscale big endian board with a custom distro (nothing funny here, just kernel, drivers, busybox and some utilities). Well, I'm sorry, I don't want to bother anyone, but those are really the results I'm seeing. -- Damien Thebault - To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html