Topic: Some problems with bridge on snapshot020205

The content of this topic has been archived on 30 Mar 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Page 1 of 1

Post #1

cyco

16 Mar 2005, 12:23

My syslog is flooded with kernel: br_netfilter: Argh!! br_nf_post_routing: bad mac.raw pointer.[vlan0][br0].
Its a V2 and I didnt setup any arp filtering and stuff. It apears also with default firewallscript. My actual script is:

$IPT -t filter -A INPUT -m state --state INVALID -j DROP
$IPT -t filter -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
$IPT -t filter -A INPUT -p icmp -j ACCEPT
$IPT -t filter -A INPUT -i $WAN -p tcp -j REJECT --reject-with tcp-reset
$IPT -t filter -A INPUT -i $WAN -j REJECT --reject-with icmp-port-unreachable
$IPT -t filter -A FORWARD -m state --state INVALID -j DROP
$IPT -t filter -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
$IPT -t filter -A FORWARD -i $WAN -m state --state NEW,INVALID -j DROP
$IPT -t filter -A FORWARD -o $WAN -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
for I in vlan0 vlan1 ; do
  $IPT -t filter -A FORWARD -o $WIFI -i $I -j DROP
  $IPT -t filter -A FORWARD -o $I -i $WIFI -j DROP
done

Any ideas? Thanks for help! Regards, Jan.

Post #2

cyco

16 Mar 2005, 22:36

Okay ... i did recognise that a switch, which is a cheap soho switch, flases on all links ... which indicates that the frames reaching it doesnt have senceless mac addresses.
A dump on an other openwrt:

21:28:00.890930 0:0:0:0:0:0 null > 0:0:19:0:0:0 sap 41 I (s=0,r=0,C) len=252
21:28:00.993254 0:0:0:0:0:0 null > 0:0:18:0:0:0 sap 41 I (s=0,r=0,C) len=252
21:28:01.095599 0:0:0:0:0:0 null > 0:0:19:0:0:0 sap 41 I (s=0,r=0,C) len=252
21:28:01.197944 0:0:0:0:0:0 null > 0:0:18:0:0:0 sap 41 I (s=0,r=0,C) len=252
21:28:01.300280 0:0:0:0:0:0 null > 0:0:19:0:0:0 sap 41 I (s=0,r=0,C) len=252

A dump on a connected system:

22:25:56.773497 00:00:00:00:00:00 null > 00:00:19:00:00:00 sap 41 I (s=0,r=0,C) len=252
22:25:56.875888 00:00:00:00:00:00 null > 00:00:18:00:00:00 sap 41 I (s=0,r=0,C) len=252
22:25:56.978614 00:00:00:00:00:00 null > 00:00:19:00:00:00 sap 41 I (s=0,r=0,C) len=252
22:25:57.080696 00:00:00:00:00:00 null > 00:00:18:00:00:00 sap 41 I (s=0,r=0,C) len=252
22:25:57.183131 00:00:00:00:00:00 null > 00:00:19:00:00:00 sap 41 I (s=0,r=0,C) len=252

Looks like 10 Frames/sec are send out by the box .... the flooding stops on disconnecting it.

Post #3

cyco

17 Mar 2005, 01:31

Okay ... it seems like i got it.
The box was running in ap-client mode. As long as the Lan and Wifi was bridged the problems was there.

After breaking the bridge it disapears:

root@smeagol:~# brctl show
bridge name     bridge id               STP enabled     interfaces
br0             8000.000f669047e9       no              vlan0
root@smeagol:~# nvram show | grep lan_ifnames
lan_ifnames=vlan0 eth2 eth3

The discussion might have continued from here.

Page 1 of 1