I switched to SNAT to avoid crashes.
I use 3rd-party software, that creates peer-to-peer pseudointerfaces on
DHCP packet, so on pseudointerface disappearing all packets are
processed via master interface that has no IP address, and this cause a
crash on test box. But similar crashes can be present in other configs
with eth interfaces w/o IP with REDIRECT rule (for ex., PPPoE BRAS).
14.10.2015 20:58, Pablo Neira Ayuso wrote:
On Tue, Oct 06, 2015 at 01:23:50PM +0300, Andrew wrote:
Maybe crash happens when packet comes to interface without assigned IP?
Do this resolved the problem for you?
Not telling here this is enough, obviously we shouldn't crash here.
06.10.2015 13:11, Andrew wrote:
Hi.
I recompiled kernel with debug info enabled; here's gdb output:
(gdb) list *nf_nat_redirect_ipv4+0x24
0x24 is in nf_nat_redirect_ipv4 (/var/testpoint/LEAF/source/i486-unknown-linux-uclibc/linux/linux-4.1/net/netfilter/nf_nat_redirect.c:60).
55
56 rcu_read_lock();
57 indev = __in_dev_get_rcu(skb->dev);
58 if (indev != NULL) {
59 ifa = indev->ifa_list;
60 newdst = ifa->ifa_local;
61 }
62 rcu_read_unlock();
63
64 if (!newdst)
04.10.2015 22:05, Pablo Neira Ayuso wrote:
Could you please do the following?
$ gdb net/netfilter/nf_nat_redirect.o
$ list *nf_nat_redirect_ipv4+0x24
And post the result, thanks.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
