lug-bg: kernel 2.3.x

[tuptac@xxxxxxxxxxxxxx (Antoby)]

> Az se osmelih da podkaram experimentalnija klon ot 2.3.22 i sym absoljutno dovolen ot stabilnostta
>
> Petko
> --

Predpolagam w momenta si s kernel s netfilter, ne ipchains firewalling.
Interesuwa me kakwi moduli polzwash ot netfilter. Opitwam se da razbera otkyde idwa edin crash, dali e kernela ili netfilter modulite. Problema idwa pri zarejdaneto na MASQ modulite:

# Load modules for masquerading
/sbin/modprobe netfilter_dev || exit 1
/sbin/modprobe ip_conntrack || exit 1
/sbin/modprobe ip_nat || exit 1
/sbin/modprobe ip_conntrack_ftp || exit 1
/sbin/modprobe ip_nat_ftp || exit 1

ledwa i masq rule za 1 host.

Kogato se wdigne interfejs ppp0 i modulite porabotqt opredeleno wreme (okolo 20min), trafik ne poweche ot 3MB se poluchawa kernel panic. Ne si zapisah syobshtenieto, no beshe ot sorta - trying to kill an idle process, ili drugo sys NULL pointer.

Ima i drug problem swyrzan s IP aliasing: primerno imam klas C mreja i 1 host s nqkolko IP(aliasing). Predi da se zaredqt wyprosnite moduli wsichko raboti kakto se ochakwa:

C = 192.168.1 primerno,  C.1, C.2 i C.3 sa syotwetno eth0, eth0:0 i eth0:1

wryzka mejdu C.2 i C.3, wsichko raboti normalno. Sled zarejdane na modulite se poluchawa neshto mnogo stranno, poluchawat se dopylnitelen broj connections:

oswen standartono C.2 -> C.3 (i C.3 -> C.2) se poqwqwa i C.3 -> C.3 (C.3 -> C.3), kato predishnata wryzka biwa prekysnata i sledwa reconnect.

Sigurno mnogo losho obqsnqwam, eto primer na praktika:

host 192.168.1.1, alias 192.168.1.2 i 192.168.1.3
ircd na 192.168.1.3 i services na 192.168.1.2
services se wryzwat kym ircd i wsichko e ok ( C.2 -> C.3), zarejdat se masq modulite, sledwa connection reset. services opitwa otnowo connect kym ircd, no ircd ne pozwolqwa, poneje source addres (weche C.3) ne e pozwolen w cfg, no na praktika kym C.3 se wijdat 2 connections, edin pyt ot C.2 i edin pyt C.3 kym C.3 + syotwetnite im obratni wryzki ot C.3.

==================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers)
Otpiswaneto RABOTI !!! : Majordomo@xxxxxxxxxxxxxxxxxx UNSUBSCRIBE LUG-BG
http://www.linux-bulgaria.org/ Hosted by Internet Group Ltd. - Stara Zagora