YOSHIFUJI Hideaki / $B5HF#1QL@ wrote: > In article <469F280B.3070900@xxxxxxxxx> (at Thu, 19 Jul 2007 10:59:55 +0200), Patrick McHardy <kaber@xxxxxxxxx> says: > > >>You're right, nf_conntrack_ipv4 only registeres SO_ORIGINAL_DST for >>AF_INET, changing that should make it work I believe. I feel like >>I'm missing something though .. > > > BTW, the name of the socket option is rather bogus. > It should be named IP_xxx, not SO_xxx because > it is in IP level, not in socket level... True, but its too late to change, we'd need to keep it around at least for userspace. With TPROXY redirection should work with all families, so presuming we'll merge it some day this might actually be useful.