Kernel panic when brouted packets reaches iptables NAT table
J Kim <jindor-/[email protected]>
| Newsgroups | gmane.linux.network.bridge.ebtables.devel |
|---|---|
| Message-ID | <[email protected]> |
Hello,
This might not be the right place to post this
question on, but I believe someone here would have some
clue.
I faced a problem that causes Linux kernel panic while
configuring transparent bridge proxy. This is very
repeatable. Here"s what I did:
1) Create A simple bridge (eth0 - eth1). No STP. IP is
assigned at bridge interface(br0) only.
2) Broutes packets that should reach transparent proxy
ebtables -t broute -A BROUTING -p IPv4 -i eth1 \
--ip-dport 80 -j redirect --redirect-target DROP
3) Redirects the packets at iptables, NAT table,
PREROUTING chain
iptables -t NAT -A PREROUTING -p tcp -dport 80 \
-j REDIRECT --to-ports 3128
Kernel panic takes place at iptable redirection rule which
redirects packets to squid instance listening at port 3128.
Could anyone tell me what is wrong with my setup? -j ACCEPT
instead of -j DROP at 2) seems to solve this kernel panic
problem but I need to broute this proxy traffic.
Any kind of response would be appreciated.
Best wishes,
Jinsuk Kim
__________________________________
Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We finish.
http://promotions.yahoo.com/new_mail
-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl