Ignatius Cheng <ignatius.cheng@xxxxxxxxxxxx> wrote: > For unknown reason, the conntrack protocol helper for GRE only > supports IPv4 and does not support IPv6. Since the generic helper > code won't accept GRE anymore, I am getting "conntrack: generic helper > won't handle protocol 47", even when the nf_conntrack_proto_gre module > is loaded. No conntrack entry is added for the IPv6 GRE, causing all > the inbound packet to be rejected/dropped. Ugh, indeed -- this is a bug, the generic tracker should allow GRE/IPv6. > Is there a reason why IPv6 is not supported in nf_conntrack_proto_gre? Noone needed it yet (or did not submit a patch).