From: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx> Date: Tue, 07 Apr 2015 13:27:33 +0200 > Also, I saw one inconsistency with sk_bound_dev_if in netfilter which > doesn't get solved by this patchset (it uses skb->sk->sk_bound_dev_if > unconditionally). I looked at this quickly, and it'll take a bit of (mechanical) work to resolve. Basically you have to get the socket down to ip_route_me_harder() and sometimes that code path is coming from that XT targets, which don't take the nf_hook_state as an argument or anything like that (yet). -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html