[Bridge] Bridging and NAT: Confusion when linux sees the packet for a second time

Jarrod Lowe jarrod.lowe at gmail.com
Tue Jul 27 06:58:13 PDT 2010

On 27 July 2010 13:12, Jarrod Lowe <jarrod.lowe at gmail.com> wrote:
> Hi,
> I have a rather odd problem.
> This is a bit of a complicated setup, if you want to know why, I have included more detail at the bottom.

Joy, I can answer my own question.

It was indeed conntrack screwing up.

The rule:
  iptables -A PREROUTING -t raw (some suitable conditions) -j NOTRACK
where "some suitable conditions match the packet as seen the second
time (In my case, I could use that they were on the internal network,
but the IPs were neither to nor from the internal network).

It would be nicer to be able to say that all bridging but non-routing
traffic was NOTRACK, but the above will do.

Jarrod Lowe

More information about the Bridge mailing list