diff options
| author | gVisor bot <gvisor-bot@google.com> | 2020-06-06 03:52:29 +0000 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2020-06-06 03:52:29 +0000 |
| commit | 35a850f06feca1014e6ec7fcf0f3576237dd6ad9 (patch) | |
| tree | 372186c40ce0daf645635d71af55fc275d48da8b /pkg/tcpip/stack | |
| parent | 3fd0d124a05da2850ba2f1fb2e367d16266a5bf5 (diff) | |
| parent | 427d2082165e0949a00631a50cf5f6834d3d626d (diff) | |
Merge release-20200522.0-91-g427d2082 (automated)
Diffstat (limited to 'pkg/tcpip/stack')
| -rw-r--r-- | pkg/tcpip/stack/nic.go | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/pkg/tcpip/stack/nic.go b/pkg/tcpip/stack/nic.go index ec8e3cb85..6664aea06 100644 --- a/pkg/tcpip/stack/nic.go +++ b/pkg/tcpip/stack/nic.go @@ -1229,7 +1229,8 @@ func (n *NIC) DeliverNetworkPacket(remote, local tcpip.LinkAddress, protocol tcp } // TODO(gvisor.dev/issue/170): Not supporting iptables for IPv6 yet. - if protocol == header.IPv4ProtocolNumber { + // Loopback traffic skips the prerouting chain. + if protocol == header.IPv4ProtocolNumber && !n.isLoopback() { // iptables filtering. ipt := n.stack.IPTables() address := n.primaryAddress(protocol) |