Re: Netfilter: kernel panic with REDIRECT target. (2.6.23 and 2.6.23.8)
From: Evgeniy Polyakov <hidden>
Date: 2007-11-19 19:27:15
Subsystem:
networking [general], the rest · Maintainers:
"David S. Miller", Eric Dumazet, Jakub Kicinski, Paolo Abeni, Linus Torvalds
On Mon, Nov 19, 2007 at 06:51:38PM +0000, David (david@unsolicited.net) wrote:
Patrick McHardy wrote:quoted
quoted
quoted
quoted
iptables -t nat -A PREROUTING -j REDIRECT -i eth2 -p udp --dport 5061 --to-ports 5060Also post the kernel panic log.Please try if this patch fixes the problem.No luck with the patch I'm afraid, panic log attached (of patched kernel).
Ok, let's try it hard way. Please check attached patch and tell if it helped (it will produce some debug though). What is a load on this machine? Is it simple enough to reproduce? I will take closer look tomorrow if this will not help. Thanks.
diff --git a/net/ipv4/netfilter/nf_nat_core.c b/net/ipv4/netfilter/nf_nat_core.c
index 70e7997..7dc3496 100644
--- a/net/ipv4/netfilter/nf_nat_core.c
+++ b/net/ipv4/netfilter/nf_nat_core.c@@ -607,13 +607,13 @@ static void nf_nat_move_storage(struct nf_conn *conntrack, void *old) struct nf_conn_nat *new_nat = nf_ct_ext_find(conntrack, NF_CT_EXT_NAT); struct nf_conn_nat *old_nat = (struct nf_conn_nat *)old; struct nf_conn *ct = old_nat->ct; - unsigned int srchash; + + printk("conntrack: %p, new: %p, old: %p, ct: %p.\n", + conntrack, new_nat, old_nat, ct); - if (!(ct->status & IPS_NAT_DONE_MASK)) + if (!ct || !(ct->status & IPS_NAT_DONE_MASK)) return; - srchash = hash_by_src(&ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple); - write_lock_bh(&nf_nat_lock); hlist_replace_rcu(&old_nat->bysource, &new_nat->bysource); new_nat->ct = ct;
--
Evgeniy Polyakov