From mboxrd@z Thu Jan 1 00:00:00 1970 From: Patrick McHardy Subject: Re: [PATCH] Change masquerade code to use first IP address of interface. Date: Wed, 20 Oct 2004 19:42:15 +0200 Sender: netfilter-devel-bounces@lists.netfilter.org Message-ID: <4176A377.8@trash.net> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Cc: netdev@oss.sgi.com, Rusty Russell , netfilter-devel@lists.netfilter.org Return-path: To: Herbert Xu In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netdev.vger.kernel.org Herbert Xu wrote: >Rusty Russell wrote: > > >>+ newsrc = inet_select_addr(out, 0, RT_SCOPE_UNIVERSE); >>+ if (!newsrc) { >>+ printk("MASQUERADE: %s ate my IP address\n", out->name); >>+ return NF_DROP; >> >> > >Wouldn't it be better to select the address for the gateway that we're >sending towards? > > I agree. Rusty, I already have your patch queued in a post-2.6.9 tree, I'm going to add Herbert's patch on top. Regards Patrick