Re: connection tracking of ipv6

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



From: Jörg Schütter <netfilter@xxxxxxxxxxxxx>
Date: Tue, 18 Apr 2006 20:58:11 +0200

> I'm still having problems with connection tracking of ipv6. It
> looks like none of the packets is detected as a port of a
> established connection.
> Can someone please show me what I'm doing wrong.
> 
> lsmod | grep -E '(ip6_|ip_|xp_|ip_|x_|iptable|ip6table)'
> ip6table_filter         1984  1
> ip6_tables              9880  1 ip6table_filter
> iptable_filter          2112  1
> ip_tables               8792  1 iptable_filter
> ip_conntrack           39352  2 xt_state,xt_conntrack
> nfnetlink               4440  1 ip_conntrack
> x_tables                8388  6 ipt_REJECT,xt_tcpudp,ip6_tables,ip_tables,xt_state,xt_conntrack

Please build and use nf_conntrack and nf_conntrack_ipv6 instead of
ip_conntrack. You need to say n on IP_NF_CONNTRACK and say y or m
on NF_CONNTRACK and NF_CONNTRACK_IPV6.

And please note that nf_conntrack has not supported IPv4 NAT yet, though.

-- Yasuyuki Kozakai



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux