From: Dries De Winter <dries.dewinter@xxxxxxxxx> Date: Wed, 5 Dec 2012 14:41:59 +0100 > My "noreroute" patch will not fix this. Therefore it's indeed maybe > better to add a simple check to ip6_route_me_harder(): not a check for > ICMPv6, but a check for (ipv6_addr_type(&iph->daddr) & > IPV6_ADDR_LINKLOCAL) instead. What do you think? What if a packet is rewritten from a non-link-local destination address into a link-local one? Or vice versa? Your test will fail in those cases. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html