> 14:47:47.888815 158.152.1.222 > 10.0.1.4: icmp: echo reply
> ^^^^^^^^
> This is wrong. Our ISP definitely did not
> send us a packet with the IP dest. address
> 10.0.1.4.
>
....
> Alexey - are there more changes to come?
I see. I fixed only masquearding direction, but not demasquerading one.
Actually, this question is not to me but to guys who
maintain masquerading. ip_fw_demasquerade must copy packet
before modification if it is queued on sniffer itself,
because generic code has no way to know, when packet
is modified.
NOTE: masquerading direction is handled by generic code,
because IP packet is always modified by ip_forward even if it is not
masqueraded.
Alexey
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/faq.html