| Harald Welte | 1268184 | 2001-05-26 04:40:37 +0000 | [diff] [blame] | 1 | Known bugs: |
| Rusty Russell | 967893b | 2000-10-06 08:11:40 +0000 | [diff] [blame] | 2 | |
| 3 | 1) NAT in the OUTPUT chain does not work in general. The fix is | ||||
| 4 | intrusive, and means we will have a CONFIG_NF_IP_NAT_LOCAL option | ||||
| 5 | when it comes back. | ||||
| 6 | |||||
| 7 | 2) tcpdump traffic is corrupted by OUTPUT NAT. | ||||
| 8 | |||||
| 9 | 3) Connection tracking doesn't wait very long for reply FIN, meaning | ||||
| 10 | that half-closed pipes can time out early (seen frequently with squid). | ||||