Re: [PATCH v2] bridge: ebtables: fix reception of frames DNAT-ed to bridge device
From: Stephen Hemminger <stephen@networkplumber.org>
Date: 2017-03-21 23:32:58
Also in:
bridge, lkml, netfilter-devel
On Tue, 21 Mar 2017 23:28:45 +0100 Linus Lüssing [off-list ref] wrote:
However, the IP code drops it in the beginning of ip_input.c/ip_rcv() as the dnat target did not update the skb->pkt_type. If after dnat'ing the packet is now destined to us then the skb->pkt_type needs to be updated from PACKET_OTHERHOST to PACKET_HOST, too.
Why not fix DNAT netfilter module rather than hacking bridge code here.