On Tue, Mar 12, 2013 at 07:11:01AM +0100, Florian Westphal wrote: > Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx> wrote: > > ip6tables -t nat -A OUTPUT -d fd00:0:0:3::/64 -j DNPT --src-pfx > > fd00:0:0:3::/64 --dst-pfx fd00:0:0:1::/64 > [..] > > This won't work, DNPT is stateless, the nat table is only consulted > for the first packet of a connection. > > Use mangle instead, this should also take care of possible new > route due to changed dst address. > > Any objections wrt. restricting NPT to mangle? No. People are getting confused with this, so let's get this into the nf tree to hit mainstream as soon as possible. Applied, thanks Florian. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
