Re: iptables: Masquerading problems in 2.3.99pre3

From: Jorge Nerin (jnerin@svalero.es)
Date: Sun Apr 02 2000 - 18:31:13 EST


Trever Adams wrote:
>
> PPP link went down, it came back up. Instant crash. If I am not using
> iptables -t nat with MASQUERADE this does not happen. Whenever I have a
> MASQUERADE rule and the ppp link goes down and comes back, it crashes.
>
> Included are the oops traces.
>
> Trever
> --
> For the finest in family and value oriented products:
> http://www.daysofyore.com
>
> ------------------------------------------------------------------------
> Apr 2 17:30:05 aurora kernel: kernel BUG at vmalloc.c:211!
> Apr 2 17:30:05 aurora kernel: invalid operand: 0000
> Apr 2 17:30:05 aurora kernel: CPU: 0
> Apr 2 17:30:05 aurora kernel: EIP: 0010:[vmalloc+53/176]
> Apr 2 17:30:05 aurora kernel: EFLAGS: 00010286
> Apr 2 17:30:05 aurora kernel: eax: 0000001d ebx: bffffab4 ecx: 00000013 edx: c5d5a1e0
> Apr 2 17:30:05 aurora kernel: esi: 30627000 edi: c5819e68 ebp: c5819e0c esp: c5819dbc
> Apr 2 17:30:05 aurora kernel: ds: 0018 es: 0018 ss: 0018
> Apr 2 17:30:05 aurora kernel: Process ipchains (pid: 1855, stackpage=c5819000)

I noticed that you are using ipchains, in 2.3.99 the main tool for this
work is iptables (netfilter.kernelnotes.org), I use this rules with
iptables 1.0beta, and it works ok for me, and in the same case as yours,
the link goes down and up again.

iptables -t nat -A POSTROUTING -o ppp+ -j MASQUERADE
iptables -A FORWARD -i ppp+ -m state --state RELATED,ESTABLISHED -j
ACCEPT
iptables -A FORWARD -o ppp+ -j ACCEPT

BTW have you checked that pppd is 2.3.11 and that went your link went
down pppd has died?

-- 
Jorge Nerin
<jnerin@svalero.es>
<comandante@zaralinux.com>

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Fri Apr 07 2000 - 21:00:11 EST