Re: ipt_SYNPROXY: kernel panic caused by nullpointer dereference

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, Dec 08, 2013 at 08:16:00AM +0100, Nicki P. wrote:
> hi,
> 
> when activating ipt_SYNPROXY with:
> iptables -t raw -A PREROUTING -p tcp -d 1.2.3.4 --dport 80 --tcp-flags
> SYN,ACK,RST,FIN SYN -j SYNPROXY
>
> and sending a SYN packet to port 80:
> hping3 -S -d 64 1.2.3.4 -p 80
> 
> I get kernel panic:
> http://goo.gl/L6dCz6
>
> I'm using kernel v3.12.2 and iptables v1.4.21. Am I doing something wrong,
> or is it a bug?

You have to run this from the INPUT/FORWARD chain, SYNPROXY needs the
routing information to work.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux