Red Hat Bugzilla – Bug 459815
Running RHEL5 in VMware 1.0.6 (under Windows XP) with a software bridge causes IPtables to drop ESTABLISHED connections
Last modified: 2010-06-07 06:24:50 EDT
Description of problem:
A RHEL5 guest under VMware 1.0.6 running on Windows XP will drop packets that should normally be ACCEPTED by the ESTABLISHED rule.
Version-Release number of selected component (if applicable):
RHEL 5.2 + latest errata
Steps to Reproduce:
1. Install a RHEL5 guest OS under VMware-server running on Windows XP.
2. In VMware configure 3 Ethernet interfaces using "bridged" mode.
3. Boot the RHEL5 guest
4. In the guest OS, configure 3 ethernet interfaces, eth0-eth2. eth0 and eth1 should be up but with no IP address. eth2 should have an IP address.
5. Create a bridge br0 with interfaces eth0 and eth1.
6. Use the default IPtables ruleset which uses an ESTABLISHED rule.
7. Run a script which repeatedly scp's a 1k file to a remote host and keeps a count of how many it's done.
8. If the bridge is down then this will carry on forever.
9. If the bridge is up then it will hang after less than 1000 iterations.
Script continues for ever.
It appears that conntrack is failing and packets that should be ESTABLISHED are in fact being dropped.
Do you have bridge netfilter enabled? If so please try disabling it. Thanks!
can we close this bug? I've got no answer for quite some time,
I'll close this bug next week if I dont hear from you
I've got no response, closing as not a bug