Re: NAT/POSTROUTING rules doesn't match packets (SOLVED?)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> On Friday 07 of October 2005 21:44, Marek Zachara wrote:

> As a workaround, is there a way to manually clean up conntrack table - i'd put 
> it in the boot scripts to assure such problems doesn't happen again. I know i 
> can put a iptable rule to block all incoming UDP traffic for 3 minutes after 
> boot-up (so the entries get cleaned), but this makes the router useless for 
> these 3 minutes ...

Do i understand this correctly, the problem why the packets don't get
masqueraded/natted properly is that they already have a conntrack entry
before the nat rules are in place ??

> 
> Marek
> 

--arne

_________________________________________________
Versendet über Webmail der HAW Hamburg
http://www.haw-hamburg.de/webmail




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux