20210820-Re_GSoC Port Forwarding-1111.html 2.8 KB

123456789101112131415161718192021222324252627282930313233
  1. <html>
  2. <head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
  3. <title>Re: GSoC Port Forwarding</title>
  4. <link rel="important stylesheet" href="">
  5. <style>div.headerdisplayname {font-weight:bold;}
  6. </style></head>
  7. <body>
  8. <table border=0 cellspacing=0 cellpadding=0 width="100%" class="header-part1"><tr><td><div class="headerdisplayname" style="display:inline;">Oggetto: </div>Re: GSoC Port Forwarding</td></tr><tr><td><div class="headerdisplayname" style="display:inline;">Mittente: </div>Giulio <giulio@gmx.com></td></tr><tr><td><div class="headerdisplayname" style="display:inline;">Data: </div>20/08/2021, 03:20</td></tr></table><table border=0 cellspacing=0 cellpadding=0 width="100%" class="header-part2"><tr><td><div class="headerdisplayname" style="display:inline;">A: </div>Marek Marczykowski-Górecki &lt;marmarek@invisiblethingslab.com&gt;</td></tr><tr><td><div class="headerdisplayname" style="display:inline;">CC: </div>Frédéric Pierret &lt;frederic.pierret@qubes-os.org&gt;</td></tr></table><br>
  9. <div class="moz-text-flowed" style="font-family: -moz-fixed; font-size: 14px;" lang="x-unicode">Hi,
  10. <br>I have made a lot of changes in the core-agent-linux code in order to
  11. fix minor bugs which emerged during manual testing as well as improve
  12. the overall logic robustness.
  13. <br>Unfortunately, I am still having some troubles in debugging why the
  14. incoming packes in sys-net are not reaching the next hop (sys-firewall,
  15. 10.137.0.6). Tcpdump and nft trace monitor are totally silent in
  16. sys-firewall, which I guess confirms the 0 counter as shown in the
  17. "rules" screenshot (which is of sys-net). Tracing the packets seems to
  18. show a succesful opeartion:
  19. <br>1) The incoming packet is accepted
  20. <br>2) The packet is forwarded to the vif72.0 interface succesfully
  21. <br>
  22. <br>The trace is the result of the "ssh <a class="moz-txt-link-abbreviated" href="mailto:test@192.168.137.128">test@192.168.137.128</a>" command, which
  23. is the ip of ens6 in sys-net
  24. <br>
  25. <br>I will continue to try to debug the problem tomorrow, but still I am not
  26. really sure what to check more...
  27. <br>
  28. <br>
  29. <br>Cheers
  30. <br>Giulio
  31. <br></div><BR><DIV CLASS="moz-attached-image-container"><IMG CLASS="moz-attached-image" shrinktofit="yes" SRC="EmbeddedImages-1/0.jpg"></DIV><BR><DIV CLASS="moz-attached-image-container"><IMG CLASS="moz-attached-image" shrinktofit="yes" SRC="EmbeddedImages-1/1.jpg"></DIV><br><hr><br><div style="font-size:12px;color:black;"><img src="data:image/gif;base64,R0lGODdhDwAPAOMAAP///zEwYmJlzQAAAPr6+vv7+/7+/vb29pyZ//39/YOBg////////////////////ywAAAAADwAPAAAESRDISUG4lQYr+s5bIEwDUWictA2GdBjhaAGDrKZzjYq3PgUw2co24+VGLYAAAesRLQklxoeiUDUI0qSj6EoH4Iuoq6B0PQJyJQIAOw==">
  32. <ul><li><a href="Attachments-1/trace.JPG">Attachments-1/trace.JPG</li></a><li><a href="Attachments-1/rules.JPG">Attachments-1/rules.JPG</li></a></ul></div><div class='' ></div></body>
  33. </html>