Kernel panic when brouted packets reaches iptables NAT table

J Kim <jindor-/[email protected]>
Newsgroups gmane.linux.network.bridge.ebtables.devel
Message-ID <[email protected]>
Hello,

This might not be the right place to post this
question on, but I believe someone here would have some
clue.
 
I faced a problem that causes Linux kernel panic while 
configuring transparent bridge proxy. This is very 
repeatable. Here"s what I did:
 
 
 1) Create A simple bridge (eth0 - eth1). No STP. IP is
   assigned at bridge interface(br0) only.

 2) Broutes packets that should reach transparent proxy 
 
 ebtables -t broute -A BROUTING -p IPv4 -i eth1 \
   --ip-dport 80 -j redirect --redirect-target DROP
 
 3) Redirects the packets at iptables, NAT table, 
    PREROUTING chain
 
 iptables -t NAT -A PREROUTING -p tcp -dport 80 \
    -j REDIRECT --to-ports 3128
    
    
Kernel panic takes place at iptable redirection rule which 
redirects packets to squid instance listening at port 3128.

Could anyone tell me what is wrong with my setup? -j ACCEPT
instead of -j DROP at 2) seems to solve this kernel panic
problem but I need to broute this proxy traffic.

Any kind of response would be appreciated.

Best wishes,

Jinsuk Kim


		
__________________________________
Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We finish.
http://promotions.yahoo.com/new_mail 


-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.