[Bridge] Unable to DNAT packets back into originating bridge port

Florian Westphal fw at strlen.de
Fri Jun 27 18:52:13 UTC 2014

Matthijs Kooijman <matthijs at stdin.nl> wrote:
> I recently stumbled upon an issue in my iptables setup. After some
> extensive debugging, I've found that the problem occurs when trying to
> DNAT (+SNAT) a packet that comes in through a bridge, back into the same bridge
> port it originated from.
> The code ultimately responsible for this is the should_deliver function
> [1], which prevents packets from being delivered back to their
> originating port (ultimately to prevent bouncing broadcast message, I
> believe).

Sounds like

More information about the Bridge mailing list