RHEL: Policy based routing does not work when the incoming packets are redirected via iptables NAT rules

Solution In Progress - Updated -


  • When incoming TCP segments are directed to another port via iptables "-j REDIRECT" the policy routing that should route the response back to the sender is not used. Instead the default routing table is used.


  • Red Hat Enterprise Linux 7.5
  • Policy routing is based on a secondary address of the interface
  • incoming packets are addressed to the secondary address

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In