Hi everybody,
I use NAT since 2003 on a little home LAN. Recently after my old
firewall died I replaced it. From time to time there is a kernel panic.
The message is not always the same (and it is Chinese for me), but it
always ends with "exception in interrupt" and speaks of "common-irq";
when i can see the beginning it's about iptables-nat, and anyway it
doesn't happen when iptables is stopped. Could there be an issue with
SMP (I have two dual-core Xeons)
Here is my /etc/sysconfig/iptables file:
# Generated by iptables-save v1.2.9 on Thu Aug 19 18:12:27 2004
*nat
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A POSTROUTING -o eth0 -j SNAT --to-source 81.57.16.29
COMMIT
# Completed on Thu Aug 19 18:12:27 2004
# Generated by iptables-save v1.2.9 on Thu Aug 19 18:12:27 2004
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:block - [0:0]
-A INPUT -j block
-A FORWARD -j block
-A block -m state --state RELATED,ESTABLISHED -j ACCEPT
-A block -i eth0 -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT
-A block -i eth0 -p udp -m state --state NEW -m udp --dport 21 -j ACCEPT
-A block -i eth0 -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A block -i eth0 -p udp -m state --state NEW -m udp --dport 22 -j ACCEPT
-A block -i eth0 -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
-A block -i eth0 -p udp -m state --state NEW -m udp --dport 80 -j ACCEPT
-A block -i eth0 -p tcp -m state --state NEW -m tcp --dport 25 -j ACCEPT
-A block -i eth0 -p tcp -m state --state NEW -m tcp --dport 53 -j ACCEPT
-A block -i eth0 -p udp -m state --state NEW -m udp --dport 53 -j ACCEPT
-A block -p tcp -m state --state NEW -m tcp --dport 5901 -j ACCEPT
-A block -p tcp -m state --state NEW -m tcp --dport 5801 -j ACCEPT
-A block -p tcp -m state --state NEW -m tcp --dport 2009 -j ACCEPT
-A block -p tcp -m state --state NEW -m tcp --dport 2106 -j ACCEPT
-A block -p tcp -m state --state NEW -m tcp --dport 7777 -j ACCEPT
-A block -p tcp -m state --state NEW -m tcp --dport 5432 -j ACCEPT
-A block -i ! eth0 -j ACCEPT
-A block -j DROP
COMMIT
# Completed on Thu Aug 19 18:12:27 2004
Can anybody help?
Jacques Rodary (Sorry for my English)
