Messages in this thread | ![/](/images/icornerl.gif) | | Date | Thu, 29 Jul 2004 21:04:01 +0200 | From | Kiko Piris <> | Subject | Re: ipsec and/or netfilter problem |
| |
[ Please CC me on reply, I'm subscribed to linux-kernel but not to netfilter-devel ]
On 29/07/2004 at 02:29 +0200, Patrick McHardy wrote:
> Kiko Piris wrote: > >The problem is that the server sends the data to Internet without doing > >SNAT (checked with tcpdump) (the packets do not traverse the POSTROUTING > >chain in nat table, checked watching the pkts counters). > > > >Anyone has any hint? > > You could try the netfilter+ipsec patches in netfilter patch-o-matic-ng, > they should solve this problem,
Hi Patrick
I've tried those patches with 2.6.6 and I see the same behaviour, packets do not traverse POSTROUTING chain in nat table (and thus they are not s-natted).
What I did was to manually aply the following patches from patch-o-matic-ng-20040621 to a vanilla 2.6.6 tree:
nf_reset ipsec-01-output-hooks ipsec-02-input-hooks ipsec-03-policy-lookup ipsec-04-policy-checks
did I miss something? (I understood from your email and from patch-o-matic-ng-20040621/ipsec-*/info files that this was enough, maybe it wasn't... O:-).
> The current patches only apply to 2.6.6, but I will update them next > week
I can wait until then, no problem...
Thanks a lot for responding.
-- Kiko - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| ![\](/images/icornerr.gif) |