Reproducer and mitigation for OpenWrt 24.10.0 flow offload + PBR + NAT wrong-MAC bug (netns lab, diagnostics, firewall4 guard).
-
Updated
Feb 11, 2026 - Shell
Reproducer and mitigation for OpenWrt 24.10.0 flow offload + PBR + NAT wrong-MAC bug (netns lab, diagnostics, firewall4 guard).
Helper repository to enable fwknopd on openwrt
🛠 Reproduce and fix OpenWrt 24.10.0 flow offload bug causing NAT policy routing to misroute traffic to wrong LAN MAC addresses.
Add a description, image, and links to the firewall4 topic page so that developers can more easily learn about it.
To associate your repository with the firewall4 topic, visit your repo's landing page and select "manage topics."