> but in PREROUTING i also have a NFQUEUE target for incoming multicast > packets to do MAC-based accounting/filtering/marking, and these looped > packets are delivered with bogus source MAC addresses. > > I found out that this bogus MAC address is taken from the IP header. For > example, the given looped packet : > 45 00 00 3d 00 00 40 00 ff 11 ce 05 0a 00 01 02 e0 00 00 fb .... > yield this sMAC : 40:00:ff:11:ce:05, as if the IP header was treated as > a MAC header. > > The LOG target display these packets as having no MAC address (Indeed, > the multicast loop code strips the MAC header). Headers are not stripped. The "lo" device is of type loopback, so there will be no MAC header generated at all, because none is necessary. Subsequently, there is nothing to strip. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
