Re: [PATCH v2] bridge: ebtables: fix reception of frames DNAT-ed to bridge device

From: Stephen Hemminger
Date: Tue Mar 21 2017 - 19:33:05 EST


On Tue, 21 Mar 2017 23:28:45 +0100
Linus LÃssing <linus.luessing@xxxxxxxxx> wrote:

> However, the IP code drops it in the beginning of ip_input.c/ip_rcv()
> as the dnat target did not update the skb->pkt_type. If after
> dnat'ing the packet is now destined to us then the skb->pkt_type
> needs to be updated from PACKET_OTHERHOST to PACKET_HOST, too.

Why not fix DNAT netfilter module rather than hacking bridge code here.