Re: redirect/dnat to localhost address in prerouting chain?
Michael Tokarev <[email protected]> Thu, 25 Sep 2025 22:15:08 +0300
| Newsgroups | gmane.comp.security.firewalls.netfilter.general |
|---|---|
| Message-ID | <[email protected]> |
On 25.09.2025 19:52, Ian Pilcher wrote: > I have a multi-homed host that (among a lot of other things) routes > traffic between the different subnets in my home network. On that host > I have a couple of *redirect* rules in a prerouting chain: This is a well-known bug in netfilter, reported multiple times by multiple users. It manifests itself in several cases, one of them is what you've found. See my other emails in this mailinglist from this year for other examples, - examples which clearly and obviously shows the buggy behavior. There are numerous other examples like this reported over the years by multiple users. Unfortunately, the netfilter devs don't consider it to be a bug. Thanks, /mjt