conntrackd external cache does not contain NAT information

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi

I am building a firewall with
  kernel 2.6.29.6
  iptables 2.4.4
  conntrack-tools 0.9.13 (FTFW mode)
  heartbeat version 1

conntrack synchronisation works fine except NAT traffic. If I do
conntrackd -i on the active node I see the NAT information in it:

tcp 6 ESTABLISHED src=192.168.12.20 dst=12.129.147.65 sport=2403 dport=80 src=12.129.147.65 dst=84.73.54.61 sport=80 dport=2403 [ASSURED] [active since 48s]

On the standby node I am missing the NAT information (conntrackd -e):

tcp 6 ESTABLISHED src=192.168.12.20 dst=12.129.147.65 sport=2403 dport=80 [ASSURED] [active since 91s]

Has anybody a hint?

Thx
Egon
--
-----------------------------------------------------------------------------------------
addr://Kasinostrasse 30, CH-5001 Aarau   fon://++41 62 823 9355
http://www.terreactive.com fax://++41 62 823 9356
------------------------------------------------------------------------------------------
Wir sichern Ihren Erfolg.                                 terreActive AG
------------------------------------------------------------------------------------------
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux