Re: [netfilter-core] iptables redirect is broken on bridged setup

[Patrick McHardy]

Denis Vlasenko wrote:

Linux 2.6.12
Was running for months with this simple iptables rule:

iptables -t nat -A PREROUTING -s 172.17.6.44 -d 172.16.42.201 -p tcp --dport 
9100 -j REDIRECT --to 9123

Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
       0        0 REDIRECT   tcp  --  *      *       172.17.6.44          
172.16.42.201      tcp dpt:9100 redir ports 9123

But now I need to bridge together two eth cards in this machine, and
suddenly redirect is no longer works.

This doesn't look related to the nf_reset problem since it happens
in PREROUTING and only the output hooks are defered. I suspect a
configuration error, when there is no IP configured on a device
the REDIRECT target can't be used.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/