From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: passt.top; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: passt.top; dkim=pass (1024-bit key; unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=KjaG8CYB; dkim-atps=neutral Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) by passt.top (Postfix) with ESMTPS id 934395A027E for ; Tue, 20 May 2025 17:56:58 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1747756617; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=OUVcZcTMKQN2P2f14ovOQG2sZY7T7MSr1SfD2S+HdZI=; b=KjaG8CYBdHKKWgwTb4tX8Z0UP8pA/67kjSjXWbogMnSsoQYTt9nZSRWw61fFS9Ie5TD1cM Vqnf6PRtfenitLV+7xXBbCSNgRMygCzGTV+OfAVBiO/kGzPDbr33TKY7F7pBeacuzx4LFR 6fY57w23Smp2yxthRL7i+48klqsiQok= Received: from mail-wm1-f71.google.com (mail-wm1-f71.google.com [209.85.128.71]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-656-DTJUA4HIPiasuXVh441zFw-1; Tue, 20 May 2025 11:56:55 -0400 X-MC-Unique: DTJUA4HIPiasuXVh441zFw-1 X-Mimecast-MFC-AGG-ID: DTJUA4HIPiasuXVh441zFw_1747756614 Received: by mail-wm1-f71.google.com with SMTP id 5b1f17b1804b1-43cf5196c25so38790135e9.0 for ; Tue, 20 May 2025 08:56:55 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1747756614; x=1748361414; h=content-transfer-encoding:mime-version:organization:references :in-reply-to:message-id:subject:cc:to:from:date:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=OUVcZcTMKQN2P2f14ovOQG2sZY7T7MSr1SfD2S+HdZI=; b=L9FfXXLrFTboAlOxDkqE4590HWA7hyYpqN3xAIN4lSp+0vTLJcsWSynHm3dlod+sX1 X/y/P7S/KC1fs/TuakbVKwUYArjHGgkaejyej+7NEVj15PJc+vwslYv673mHKI7cxaTa qaB9n+cu9BkudcgrxUA2kdKgN4T1HUyHTchQMMwO5Tc7yulnqI4fYf9gNBUIg7snMLIb VnksxAutIqhaZdubrbDuj0OLqsBY7oVeBj/uuJH0jlQ72DoOBT28QD7ZaNg2Q96QdZ/A 9uBC9+yHTKQFbeXzdJFRW7S2R0HrVROeCiKHzx8m3O6+omwD2Rh40234pAWNyy51xJWR 21Cg== X-Gm-Message-State: AOJu0YzClzeUfv3RkM8js83IHz6wIOO0J/cLDfI09zBVtAZwuyMgsshp 1KlDCTbht0KpXdTRjsfhWc04Ku1H1sni234cy19PlguvP7qr6FLzzlKEPz35mNPN+U2FVGk6vAc rGXrPzP4ipP+rE2uyXBuyAXIJpd1Lt1+yoriV77EcJaWOVRnFgzxzX/NthAcGrMY= X-Gm-Gg: ASbGnct786t45s54aTcmAX1JcX5BXs6vIc1ZN7EZnRmytEiwkOW/TUPFscuBcGaOG6d IHilLOLfWZZxSaBjcaU40GY0c1oXUVkoEBiUO41hC6F0/YidjE82YlHHl5MrMAxIiZKP9ygM4w7 rKxpNwSkqSF4Tas/+bOKSyl2jDz+E3ScvlACLmNsNqVsVd8b6O74hx39GizsA6lQFImbwwMxLox l3ybfOkhUsmRIbyvzhhKAXpXZAXWCVWHZ08qtM+u3ZrisXgf3m+9wzwMJnSzmB7ZGVUi/3dALjT jlEZduY5YyBsaHmqFVZRLGI= X-Received: by 2002:a05:600c:3f07:b0:43d:77c5:9c1a with SMTP id 5b1f17b1804b1-442fd60b516mr169398055e9.4.1747756614270; Tue, 20 May 2025 08:56:54 -0700 (PDT) X-Google-Smtp-Source: AGHT+IF/la33fOXnt6lbxVO7Vna3EF+fwqfM2kUPaHE9neqfbBUiwUvjDZmAL+r55nBNxss2Lpg/vw== X-Received: by 2002:a05:600c:3f07:b0:43d:77c5:9c1a with SMTP id 5b1f17b1804b1-442fd60b516mr169397795e9.4.1747756613828; Tue, 20 May 2025 08:56:53 -0700 (PDT) Received: from maya.myfinge.rs (ifcgrfdd.trafficplex.cloud. [2a10:fc81:a806:d6a9::1]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-447f23bfd54sm38175435e9.17.2025.05.20.08.56.53 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 20 May 2025 08:56:53 -0700 (PDT) Date: Tue, 20 May 2025 17:56:52 +0200 From: Stefano Brivio To: Ayon T Subject: Re: Help with pasta usage Message-ID: <20250520175652.432c335b@elisabeth> In-Reply-To: References: <20250512160553.3ec3bd50@elisabeth> <20250512165944.1d42fa62@elisabeth> Organization: Red Hat X-Mailer: Claws Mail 4.2.0 (GTK 3.24.49; x86_64-pc-linux-gnu) MIME-Version: 1.0 X-Mimecast-Spam-Score: 0 X-Mimecast-MFC-PROC-ID: 4ZKKJZmU-qWMvnedbCveneqjCV-I48_vMpVJbIqm8rY_1747756614 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Message-ID-Hash: MGIXJCYVKR4NVWSXTKACPQDU5IW64BLO X-Message-ID-Hash: MGIXJCYVKR4NVWSXTKACPQDU5IW64BLO X-MailFrom: sbrivio@redhat.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: passt-user@passt.top X-Mailman-Version: 3.3.8 Precedence: list List-Id: "For passt users: support, questions and answers" Archived-At: Archived-At: List-Archive: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Hi Ayon, On Tue, 20 May 2025 12:09:46 -0230 Ayon T wrote: > Hi, > > I'm sorry for the delayed response. No, I am still using > 0.0~git20250217.a1e48a0-1. I just meant that I had not used apt for > installing passt. ...where did you take that package from, though? If it's something like alvistack (https://github.com/alvistack/passt-top-passt/), there might be other patches or modified / missing AppArmor profiles, and I can't really look into that as well (I already maintain official packages, at least for Debian). > I had an upgrade planned to Ubuntu 24.10 and after that upgrade, my > connections to port 53 are being refused when I'm using pasta, leaving me > unable to use a DNS resolver. I'm not sure why this is. It works fine with > the default network driver. > > This is not the issue I contacted you with and that's why I'm trying to > figure out why this is happening myself (albeit with little luck). I would suggest to start passing the --pcap option to pasta, say: podman run --net=pasta:--pcap,/tmp/port53.pcap ... and then have a look at the resulting packet capture (with Wireshark / tshark, for example). As we keep fixing bugs, and we fixed quite a lot of things with UDP flows since February, an updated package, or even a build from source, (git clone git://passt.top && cd passt && make && sudo make install) might be worth a try. It takes a few seconds to build / install, and can be removed cleanly with 'sudo make uninstall'. -- Stefano