Subject: Re: [PATCH v2] bridge: ebtables: fix reception of frames DNAT-ed to bridge device

From: Stephen Hemminger <[email-masked]>
Date: Tue, 21 Mar 2017 16:32:45 -0700

On Tue, 21 Mar 2017 23:28:45 +0100
Linus Lüssing <[email-masked]> wrote:

> However, the IP code drops it in the beginning of ip_input.c/ip_rcv()
> as the dnat target did not update the skb->pkt_type. If after
> dnat'ing the packet is now destined to us then the skb->pkt_type
> needs to be updated from PACKET_OTHERHOST to PACKET_HOST, too.

Why not fix DNAT netfilter module rather than hacking bridge code here.