Re: Kernel 5.0-rc5 regression with NAT, bisected to: netfilter: nat: remove l4proto->manip_pkt

2019-02-08 Thread Sander Eikelenboom
On 08/02/2019 12:54, Florian Westphal wrote: > Florian Westphal wrote: >> Sander Eikelenboom wrote: >>> L.S., >>> >>> While trying out a 5.0-RC5 kernel I seem to have stumbled over a regression >>> with NAT. >>> (using an nftables firewall with NAT and connection tracking). >>> >>>

Re: Kernel 5.0-rc5 regression with NAT, bisected to: netfilter: nat: remove l4proto->manip_pkt

2019-02-08 Thread Florian Westphal
Florian Westphal wrote: > Sander Eikelenboom wrote: > > L.S., > > > > While trying out a 5.0-RC5 kernel I seem to have stumbled over a regression > > with NAT. > > (using an nftables firewall with NAT and connection tracking). > > > > Unfortunately it isn't too obvious since no errors are

Re: Kernel 5.0-rc5 regression with NAT, bisected to: netfilter: nat: remove l4proto->manip_pkt

2019-02-07 Thread Florian Westphal
Sander Eikelenboom wrote: > L.S., > > While trying out a 5.0-RC5 kernel I seem to have stumbled over a regression > with NAT. > (using an nftables firewall with NAT and connection tracking). > > Unfortunately it isn't too obvious since no errors are logged, but on clients > it > causes

Kernel 5.0-rc5 regression with NAT, bisected to: netfilter: nat: remove l4proto->manip_pkt

2019-02-07 Thread Sander Eikelenboom
L.S., While trying out a 5.0-RC5 kernel I seem to have stumbled over a regression with NAT. (using an nftables firewall with NAT and connection tracking). Unfortunately it isn't too obvious since no errors are logged, but on clients it causes symptoms like firefox intermittently not being able