Details
-
Bug
-
Status: Resolved
-
Medium
-
Resolution: Cannot Reproduce
-
None
-
None
-
None
-
None
Description
Consider the following scenario:
1) VM1 sends broadcast ping to 255.255.255.255
2) Conntrack tracks this session between VM1 IP and 255.255.255.255
3) Reply from VM2 will be from VM2 IP and not from 255.255.255.255, thus, conntrack treats this as an invalid response
The above is the same for the multicast case; multicast replies are dropped by conntrack.
Though the above behaviour has been currently implemented by design, it does not allow for usage where the reply packets are actually desired.