Opened 11 years ago

Closed 11 years ago

#877 closed defect (fixed)

iptables connmark and iproute fwmark no longer work correctly

Reported by: netprince (at) vt (dot) edu Owned by: developers
Priority: high Milestone: 0.9/rc6
Component: kernel Version:
Keywords: iptables connmark iproute fwmark Cc:


I have tested the release of whiterussian RC5, and everything works well. Whiterussian from SVN does not correctly route packets according to their fwmark. Please see this thread:

Attachments (0)

Change History (7)

comment:1 Changed 11 years ago by netprince (at) vt (dot) edu

BOUNTY: I realize that whiterussian is stale, and since this bug is over my head, I am offering a bounty to the dev that can squash this one. After its fixed, I can send either cash or donate a router, your choice, just contact me _before_ you start to finalize the details. Use my email address, or PM netprince in the forums.

comment:2 Changed 11 years ago by netprince (at) vt (dot) edu

I managed to work out a solution. I removed the 216-multiple_default_gateways.patch and everything works fine. I am not using any functionality from that patch, so its no big deal for me to remove it.

comment:3 Changed 11 years ago by andycpp

netprince: your workaround doesn't work for me - conntrack --ctstate always answers "No chain/target/match" etc...

ps. Please, fix it ASAP... please :)

comment:4 Changed 11 years ago by netprince (at) vt (dot) edu

andycpp: I'm not using contrack, I dont believe this patch is the source of your problem.

BTW, did you install iptables-mod-conntrack? Do you have a forum post I can review?

comment:5 Changed 11 years ago by netprince (at) vt (dot) edu

andycpp: check this ticket: /ticket/988.html

comment:6 Changed 11 years ago by anonymous

netprince: yep, I saw that ticket - I believe the source is the same - I've reviwed 216 patch - deep network patching (about 35k) has very high a lot of bugs and error probability.

Ok. I'll be waiting for solution. Now I'm using Oleg's FW - seems to be stable one.

comment:7 Changed 11 years ago by florian

  • Resolution set to fixed
  • Status changed from new to closed

Deleted in [6161]

Add Comment

Modify Ticket

as closed .
The resolution will be deleted. Next status will be 'reopened'.

E-mail address and user name can be saved in the Preferences.

Note: See TracTickets for help on using tickets.