Re: Kernel panic when brouted packets reaches iptables NAT table

Hello,

> 
> The commands you mention do not work.
> Using these two commands below, I was unable to trigger anything unusual:
> ebtables -t broute -A BROUTING -p ipv4 -j redirect --redirect-target DROP
> iptables -t nat -A PREROUTING -j REDIRECT -p tcp --to-ports 3128
> 
> The port change happens.


I may have given you a wrong idea. Rules themselves are 
accepted well. Kernel panic takes place when a http packet
with dst port 80  actually comes in from interface eth1. 
It is supposed to be brouted, and then redirected to local 
process listening to port 3128.

ebtable rule is fine. Kernel panic is caused by the existence
of the redirection iptables rule in NAT table PREROUTING 
chain. Without it, nothing happens.

Also, if ebtable has -j ACCEPT instead of -j DROP, redirection
works as expected. It led me to suspect that something (or some
configuration) about brouting and redirection is wrong.I hope 
I made myself clearer here.

> 
> Please at least try the rules you post before posting them.
> 

Of course I posted it after I tried it many times, confirmed 
it is repeatble. 


Jinsuk Kim

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl