ѽ҉ᶬḳ℠ <vtol@xxxxxxx> wrote: > Oh, I just saw that CHECKSUM extension is not supported in NFT. Which > introduces a rather unpleasant situation as LXC containers are not > getting an ip from the host's dhcp. Yuck. What dhcpd is that? CHECKSUM is a kludge workaround for old dhcpd that do not support csum. You can try to do meta oifname br* udp dport 68 udp checksum set 0 and see if that makes dhcpd work. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html