On Tue, 3 Feb 2004, Jozsef Kadlecsik wrote:
> I created exactly the same setup (machine 1 and 3 are UMLs) and could not
> reproduce the problem. tcpdump shows that machine 1 sends fragmented ICMP
> echo requests and machine 3 sends ICMP echo reply back. On machine 2,
> ip_conntrack_max is lowered to 10, still there is no problem after
> hundreds of pings.
> Do you have any extra patch applied on the top of 2.6.2rc2?
No extra patches, it's the vanilla 2.6.2rc2 kernel. I'm running a
nonmodular kernel and have spent this morning recompiling it with
different options - the problem is only showing up when CONFIG_IP_NF_NAT
is turned on, so I'm guessing that you are using a modular kernel and
since you haven't set up any rules in the nat table, the module isn't
loaded - try modprobing it and seeing if that helps.
- Steve Hill
Senior Software Developer Email: steve@xxxxxxxxxxxx
Navaho Technologies Ltd. Tel: +44-870-7034015
... Alcohol and calculus don't mix - Don't drink and derive! ...