Re: redirect/dnat to localhost address in prerouting chain?

Michael Tokarev <[email protected]> Thu, 25 Sep 2025 22:15:08 +0300
Newsgroups gmane.comp.security.firewalls.netfilter.general
Message-ID <[email protected]>
On 25.09.2025 19:52, Ian Pilcher wrote:
> I have a multi-homed host that (among a lot of other things) routes
> traffic between the different subnets in my home network.  On that host
> I have a couple of *redirect* rules in a prerouting chain:

This is a well-known bug in netfilter, reported multiple times by
multiple users.

It manifests itself in several cases, one of them is what you've
found.

See my other emails in this mailinglist from this year for other
examples, - examples which clearly and obviously shows the buggy
behavior.  There are numerous other examples like this reported
over the years by multiple users.

Unfortunately, the netfilter devs don't consider it to be a bug.

Thanks,

/mjt