Re: prefix len confusion

On Thu, 11 Jun 2026, at 12:51 AM, Sunny73Cr wrote:
> Try this:
>
> table ip filter {
>     chain forward {
>         type filter hook forward priority filter;
>         iifname "lo" accept # please filter this too, you'll bounce 
> your bushies (brows)

Packets sourced from or destined to 127.0.0.0/8 are not forwarded: they're dropped as martians unless net.ipv4.conf.<iface>.route_localnet is set to 1, where <iface> is the incoming interface. Hence, in most cases, the commented rule there is superfluous.

--
Kerin Millar