[FS#382] Simple static routes not working when firewall+masquerading is active

LEDE Bugs lede-bugs at lists.infradead.org
Fri Jan 13 09:37:03 PST 2017


The following task has a new comment added:

FS#382 - Simple static routes not working when firewall+masquerading is active
User who did this - Jo-Philipp Wich (jow-)

----------
Thank you for the configuration files.

I tracked down the problem to the fact that forwarded local subnet traffic carries conntrack state INVALID, which causes it to get rejected since the zone_*_dest_ACCEPT chains only consider NEW and UNTRACKED traffic.

I applied updates to the firewall source (https://git.lede-project.org/37cb4cb) and package (https://git.lede-project.org/920170a) which will address the local subnet forwarding problem.

Updated firewall binary packages should be available within the next 24 hours.
----------

More information can be found at the following URL:
https://bugs.lede-project.org/index.php?do=details&task_id=382#comment1255



More information about the lede-bugs mailing list