[Bridge] [PATCH v2] bridge: ebtables: fix reception of frames DNAT-ed to bridge device

Stephen Hemminger stephen at networkplumber.org
Tue Mar 21 23:32:45 UTC 2017

On Tue, 21 Mar 2017 23:28:45 +0100
Linus Lüssing <linus.luessing at c0d3.blue> wrote:

> However, the IP code drops it in the beginning of ip_input.c/ip_rcv()
> as the dnat target did not update the skb->pkt_type. If after
> dnat'ing the packet is now destined to us then the skb->pkt_type
> needs to be updated from PACKET_OTHERHOST to PACKET_HOST, too.

Why not fix DNAT netfilter module rather than hacking bridge code here.

More information about the Bridge mailing list