Subject: regression in socket match caused by "net: Fix RPF to work with policy routing"

From: Simon Horman <[email-masked]>
Date: Mon, 4 Jan 2010 21:04:23 +1100

Hi Jamal,

the patch "net: Fix RPF to work with policy routing",
which was added between 2.6.32-rc5 and rc6 seems to
cause a regression when using the socket match.

In particular I'm using IP_TRANSPARENT as detailed
in Documentation/networking/tproxy.txt with the following
rules:

iptables -t mangle -N DIVERT
iptables -t mangle -A PREROUTING -p tcp -m socket -j DIVERT
iptables -t mangle -A DIVERT -j MARK --set-mark 1
iptables -t mangle -A DIVERT -j ACCEPT
ip rule add fwmark 1 lookup 100
ip route add local 0.0.0.0/0 dev lo table 100