From 045edcca2fd1bc2a338489f958e89b60b3065606 Mon Sep 17 00:00:00 2001 From: Bryan Boreham Date: Wed, 13 Apr 2016 12:05:24 +0100 Subject: [PATCH] Add iptables rule excluding multicast from NAT on 'weave expose' --- weave | 1 + 1 file changed, 1 insertion(+) diff --git a/weave b/weave index 2513517e..3023f29f 100755 --- a/weave +++ b/weave @@ -2129,6 +2129,7 @@ EOF if ! ip addr show dev $BRIDGE | grep -qF $CIDR ; then ip addr add dev $BRIDGE $CIDR arp_update $BRIDGE $CIDR + add_iptables_rule nat WEAVE -s $CIDR -d 224.0.0.0/4 -j RETURN add_iptables_rule nat WEAVE -d $CIDR ! -s $CIDR -j MASQUERADE add_iptables_rule nat WEAVE -s $CIDR ! -d $CIDR -j MASQUERADE fi