Jens Taprogge wrote: > Hello. > > After upgrading from 2.6.13 an IP Masquerading router panics as soon as > soon as packages are forwarder (or rather should be). As long as IP > Masquerading is disabled (and thus no forwarding occurs) the box runs > stable. > > A picture of the panic ouput can be found at: > http://shamrock.dyndns.org/~ln/kernel/2.6.16rc3_panic/panic.jpg > The config is at: > http://shamrock.dyndns.org/~ln/kernel/2.6.16rc3_panic/config-2.6.16-rc3-g51d6aa16-dirty > > The kernel was patched to support SIP-contrack however the extra files > have not been compiled and should thus have no influence. > > Please cc me on replies as I am not subscribed to the lists. Known problem, I'll submit a fix tonight. Until then you can avoid the crash by making sure your masquerade rules don't change packets which matched an IPsec policy so they don't match anymore.