From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754428AbcLQMZd (ORCPT ); Sat, 17 Dec 2016 07:25:33 -0500 Received: from Chamillionaire.breakpoint.cc ([146.0.238.67]:57832 "EHLO Chamillionaire.breakpoint.cc" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751711AbcLQMZc (ORCPT ); Sat, 17 Dec 2016 07:25:32 -0500 Date: Sat, 17 Dec 2016 13:25:11 +0100 From: Florian Westphal To: Trevor Cordes Cc: linux-kernel@vger.kernel.org, Florian Westphal , Pablo Neira Ayuso Subject: Re: netfilter regression causes lost pings "operation not permitted" Message-ID: <20161217122511.GB13094@breakpoint.cc> References: <20161207080316.GA6350@pog.tecnopolis.ca> <20161207022321.21f67a11@pog.tecnopolis.ca> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20161207022321.21f67a11@pog.tecnopolis.ca> User-Agent: Mutt/1.5.23 (2014-03-12) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Trevor Cordes wrote: Sorry for late reply. > On 2016-12-07 Trevor Cordes wrote: > > Bisected down to: > > 870190a9ec9075205c0fa795a09fa931694a3ff1 > > 7c9664351980aaa6a4b8837a314360b3a4ad382a > > Oh! I forgot to mention the most important point: iptable_nat module > MUST be loaded for the bug to show up! > > modprobe iptable_nat > > If you rmmod it, the bug goes away. Interestingly, the bug occurs even > if you have every iptables table (including -t nat) completely empty > (no rules). All that is required is iptable_nat simply to be loaded. Pablo, I think stable should revert both patches. The alternative is for stable to pick up the fixes from 4.10 tree but that requires to pull rhhashtables new rhlist interface too... So I think revert is the way to go. Should I take care of that?