Bug#895364: iptables: using conntrack prevents dropping ip fragments

To: 895364@bugs.debian.org
Subject: Bug#895364: iptables: using conntrack prevents dropping ip fragments
From: Jim Pirzyk <jpirzyk@opendns.com>
Date: Tue, 10 Apr 2018 16:11:33 -0500
Message-id: <[🔎] CAAi1JC_X_=SpGhSVXT2zWt+=L2BV=ABARBGNLyBncb9eosHeMA@mail.gmail.com>
Reply-to: Jim Pirzyk <jpirzyk@opendns.com>, 895364@bugs.debian.org
References: <[🔎] 152337233125.1045.7491468914085650994.reportbug@stretch.localdomain>

Further research into this bug, I have found this patch report for netfilter

https://patchwork.ozlabs.org/patch/863720/

Reply to:

References:
- Bug#895364: iptables: using conntrack prevents dropping ip fragments
  - From: Jim Pirzyk <jpirzyk@opendns.com>

Prev by Date: Bug#895384: nfs-utils: debian/watch pattern matches ../
Next by Date: Bug#884284: nfs4_reclaim_open_state: Lock reclaim failed
Previous by thread: Bug#895364: iptables: using conntrack prevents dropping ip fragments
Next by thread: Bug#895378: sky2: sky2: did not recover correctly after waking up from S3
Index(es):
- Date
- Thread