NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
gb777
Jul 18, 2020Apprentice
NAT loopback debugging help wanted
As you all know the RBR 75x and RBR 85x series do not properly support NAT loopback. The question is how did they manage to screw this up? Here's what I've found so far. - they have set up the ...
minesweeper
Sep 05, 2020Aspirant
Normally linux bridge does not forward the packets to same ports, to avoid loop. If you have server and client on same port, you can try setting harpin ON for the port.
brctl hairpin br0 ethX on
gb777
Sep 05, 2020Apprentice
minesweeper wrote:Normally linux bridge does not forward the packets to same ports, to avoid loop. If you have server and client on same port, you can try setting harpin ON for the port.
brctl hairpin br0 ethX on
I've already tried that and it didn't work. But I tell you what: Netgear has actually sent my a trial firmware they claim fixes the problem. As soon as I can take the router down, I'll try it out.
- orbiraSep 05, 2020ApprenticeWell running
echo 0 > /proc/sys/net/bridge/bridge-nf-call-iptables
Makes it work. And reading about bridge-nf-call-iptables, looks like there is discussion in the community for changing the default to 0 (may be in a different context) here https://wiki.libvirt.org/page/Net.bridge.bridge-nf-call_and_sysctl.conf
So for now I have changed the value to 0, until the hot-fix or new firmware fixes that. I just need to ensure that nat/routing functionality is not impacted (i.e. the router continues to send packets from outside to ip tables and does not act like a router) will check it from external host. I don’t believe it should because bridge is at layer 2 and routing being later 3 should not get impacted.