Hi, Florian Westphal wrote : > Vincent Tondellier <tondellier+ml.nfdev@xxxxxxxxxxx> wrote: > > sysctl -w net.ipv4.ip_forward=1 > > sysctl -w net.netfilter.nf_conntrack_helper=0 > > sysctl -w net.netfilter.nf_conntrack_acct=1 > > > > And try to connect the pptp client. Instant oops. > > Q: does it not oops with _acct=0? No oops when _acct == 0, and I can't reproduce it with the ftp helper, or without the iptables helpers (_helper=0 is not needed, only the iptables rules) > If that fixes it, and you have lockdep enabled in kernel > config # grep LOCKDEP /boot/config-3.14.4 CONFIG_LOCKDEP_SUPPORT=y CONFIG_LOCKDEP=y CONFIG_DEBUG_LOCKDEP=y > -- can you check if > > commit 223b02d923ecd7c84cf9780bb3686f455d279279 > netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len > > helps? yes, no oops. Seems to be scheduled for 3.14.5 and 3.15-rc7 works too I will ask the debian bug [1] reporter if it fixes his problem Thanks [1] https://bugs.debian.org/741667 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html