Ubuntu 23.04 / 6.2 kernel netfilter pool6 not working

[cooperlees]

Howdy,

Since 23.04 I've been unable to get my netfilter pool6 to work. I have nftables setup and running. Please point out if I'm doing something wrong. I do see 6.2 + 6.3 support in latest releaed. But that does not work for me.

Happy to configuring it different, but all I want is to use Google's DNS64 + jool for my IPv6 only home network.

Repro

OS: Ubuntu 23.04 Kernel: 6.2.0-35-generic

Version:

jool-dkms/now 4.1.10-1 all [installed,local]
jool-tools/now 4.1.10-1 amd64 [installed,local]

Install:

• sudo dpkg install -i jool-dkms_4.1.10-1_all.deb jool-tools_4.1.10-1_amd64.deb
• modprobe jool
• Add to /etc/module
• sudo /usr/bin/jool instance add --netfilter --pool6 64:ff9b::/96
• ping6 64:ff9b::8.8.8.8
  • No responses

cooper@home1:~/jool$ jool stat display
JSTAT_RECEIVED6: 27802954
JSTAT_RECEIVED4: 25234374
JSTAT_SKB_TRUNCATED: 25
JSTAT_UNKNOWN_L4_PROTO: 23
JSTAT_UNKNOWN_ICMP6_TYPE: 169838
JSTAT_POOL6_MISMATCH: 27633111
JSTAT_POOL4_MISMATCH: 25233120
JSTAT_BIB4_NOT_FOUND: 410
JSTAT_SYN4_EXPECTED: 579
JSTAT_TYPE1PKT: 216
JSTAT_SO_EXISTS: 1
JSTAT_DST_OUTPUT: 5

What logs or data is helpful here to workout where the packets are going?

[ydahhrk]

ping6 64:ff9b::8.8.8.8

Are you running this ping in the translator?

If so, https://nicmx.github.io/Jool/en/faq.html#why-is-my-ping-not-working

Add to /etc/module

What are you adding to /etc/module? The instance add command? I can't find any information on this file. Are you sure it's supposed to do anything at all?

What logs or data is helpful here to workout where the packets are going?

Well, your stats indicate that most of the packets Jool is receiving are untranslatable, because they have neither pool6 nor pool4. Which might or might not be normal depending on what your clients are sending.

If you want to get a zoom in on the specific packets of your ping, try debug logging.

[cooperlees]

Thanks for the response. I don't know what exactly worked, but I went through it all again and it's working. Sorry for the noise ...