Debian 12, LACP and netfilter
From
Christoph Pleger@21:1/5 to
All on Fri Jul 26 13:30:01 2024
Hello,
I installed a computer with Debian 12, initially with only one active
Ethernet interface. I also activated a netfilter configuration for the interface. After this all worked successfully, I put the second
Ethernet interface into operation, not in normal operation as a single interface, but using the bonding LACP functionality together with the
first interface. I then changed the name of the interface in the
Netfilter configuration. Rebooted, and the netfilter rules no longer
worked, but you can also say that they worked too well, because no IP
traffic went through at all (everything works with deactivated
netfilter).
After some trial and error, I was at a loss and simply copied the
relevant files from a computer where LACP works in conjunction with
Netfilter. I changed the IP address in /etc/systemd/network/bond0.conf,
also in the Netfilter configuration, rebooted - it still didn't work.
The only difference between the two machines: The one where it works is
running Debian 11, the other Debian 12, so there must have been a
significant change between bullseye and bookworm. Does anyone have an
idea?
Regards
Christoph
-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEEHeqYcooFjlnR4zwFcOXIip7d3fEFAmajhqUACgkQcOXIip7d 3fFy6Q/9GBzv/tEqclcOj9LXw/ZX7fWPh1iMdjMrDmspz1YoxnomTWvJ9B6aO7Wt lL/BbDCwe//PexLVLYM2iZrLL+GnpY+ltpvTApqx/M71ulDlvlsE20stt58UtSeR KSQzs+QO3zF+RqXl2e2Wzdx5GxCx+nF+iW0HM09wRO/b4Cs2R/hAQ1yjH4SWc5KD YzAxt2m6tg/wUGbmn94z1P0H0Nv5mR1kakEoGfAZabVvzN1M7be7ga8Tzx9G1N9G ffCKOll4VBkqP+P0z/uEqRrHIM2AKQA9IdJ1THpW7QjM59yXb2dygNsOVkUYc2Dq +VehIUo5kBGyA55o2wC/cMiskR6TtRAWzYc9Fu0sFrYIKKEHTBZ3v0lmP/+y/AiK mtgUne2s0Sc7ENzanNrHCU2WqWfJNPsrRyRFNyp/wozDx9nadAe5SDfXq0P8775g tarGWcMauQQecS7lNz8zf3kmw5EAiGQq/i+M9t9IY+riwfldZJxEtV705tAiyiXg L4n4rx+ntT+ND9B9WyXmwbwO+42Vf8JHfyCUexQ3V9OUz3bv00vN/x9c/b8TdhQx 1GyOtUC/5HwaUTq6axHkW+hNWHsLN5DtbFGwebJgEM8tuMkWu6oVI9XM0D578J5h wcq6t989MSfyqmWz5SVoXttcBrTyFaMBy7pt2FkqMFzcQIyo45c=
=/dhY
-----END PGP SIGNATURE-----
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)