netdev - Re: [Bugme-new] [Bug 12954] New: SAMEIP --nodst functionality gone missing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <alpine.LSU.2.00.0904151410350.11308@fbirervta.pbzchgretzou.qr>
Date:	Wed, 15 Apr 2009 14:10:51 +0200 (CEST)
From:	Jan Engelhardt <jengelh@...ozas.de>
To:	Patrick McHardy <kaber@...sh.net>
cc:	Martin Josefsson <gandalf@...fs.se>,
	Andrew Morton <akpm@...ux-foundation.org>,
	netdev@...r.kernel.org, bugme-daemon@...zilla.kernel.org,
	berni@...kenwald.de, netfilter-devel@...r.kernel.org
Subject: Re: [Bugme-new] [Bug 12954] New: SAMEIP --nodst functionality gone
 missing

On Wednesday 2009-04-15 13:53, Patrick McHardy wrote:

> Patrick McHardy wrote:
>> [Resend to mailing list, I didn't notice this had left bugzilla]
>>
>> Martin Josefsson wrote:
>>> Patrick, how about making the ipaddress selection based on only client
>>> ipaddress behaviour selectable with an SNAT parameter if the problem with the
>>> patch is that the distribution can be uneven for a small number of clients?
>>
>> Actually I think the results back then were incorrect or it was
>> just bad luck or something. Ideally we would just enable this
>> unconditionally I think. I'll do some testing of the distribution
>> myself during the next days and see how it goes.
>
> The distribution did suffer noticably in some cases, so offering
> this optionally seems better.
>
> How about this patch? If the IP_NAT_RANGE_PERSISTENT flag is set
> on a NAT range, we ignore the destination address in the selection.

But where do you set IP_NAT_RANGE_PERSISTENT? (It seems like a dead 
feature right now.)
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html