[Bug 812] addrtype with limit-iface-in in ip6tables/nat/PREROUTING messes up the route cache

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Wed Apr 24 23:42:01 CEST 2013


https://bugzilla.netfilter.org/show_bug.cgi?id=812

--- Comment #2 from Florian Westphal <fw at strlen.de> 2013-04-24 23:42:00 CEST ---
(In reply to comment #1)
> Haven't been able to reproduce this so far, but the issue surely
> is caused by the fact that, when --limit-in is specified we call
> into the ipv6 route output function while passing
> the incoming interface as output interface.

I can reproduce this, and I have a fix but it introduces
unwanted dependency on ipv6 module.  I'll have to think about how
to best avoid it.

One possibility would be to revert the ipt_addrtype -> xt_addrtype rename
and move the ipv6 specific parts to ip6t_addrtype module.

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.



More information about the netfilter-buglog mailing list