Subject: Re: [tproxy,regression] tproxy broken in 2.6.32

From: Patrick McHardy <[email-masked]>
Date: Thu, 03 Dec 2009 14:55:18 +0100

jamal wrote:
> BTW, it should be noted that the change from Patrick to fib_validate
> which allows to accept local routes from will also solve this problem.
> My suggestion below is to restore old expected behavior..

Agreed, the accept_local sysctl should not be misused for this,
otherwise TPROXY setups wouldn't have source validation anymore.