[Bridge] Unable to DNAT packets back into originating bridge port

Florian Westphal fw at strlen.de
Fri Jun 27 18:52:13 UTC 2014


Matthijs Kooijman <matthijs at stdin.nl> wrote:
> I recently stumbled upon an issue in my iptables setup. After some
> extensive debugging, I've found that the problem occurs when trying to
> DNAT (+SNAT) a packet that comes in through a bridge, back into the same bridge
> port it originated from.
> 
> The code ultimately responsible for this is the should_deliver function
> [1], which prevents packets from being delivered back to their
> originating port (ultimately to prevent bouncing broadcast message, I
> believe).

Sounds like
http://marc.info/?t=136627796900001&r=1&w=2


More information about the Bridge mailing list