On Wed, Nov 23, 2011 at 9:17 PM, Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> wrote: > On Wed, Nov 23, 2011 at 11:58 AM, Patrick McHardy <kaber@xxxxxxxxx> wrote: >> >> Most likely they're using NOTRACK to avoid connection tracking for >> some traffic. Could you post the output of "iptables -t raw -vxnL"? > > Hmm. That's actually empty for me. I only went by some error messages > during bootup. Or maybe I should boot the distro kernel to see that > there isn't something else I'm missing that makes the user setup > unhappy. > SuSEfirewall2 is using NOTRACK for the lo interface. iptables -t raw -A PREROUTING -j NOTRACK -i lo iptables -t raw -A OUTPUT -j NOTRACK -o lo -- Thanks, //richard -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html