From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: passt.top; dmarc=fail (p=quarantine dis=none) header.from=redhat.com Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) by passt.top (Postfix) with ESMTPS id 8257C5A0265 for ; Sat, 14 Nov 2026 13:16:31 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1794658590; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=DJ3N99PFgFzE4oznHM5PTZLax+uXtJaxnXoQ4G1Uazg=; b=EsO7xYur8tzF9QDy0P0m6MvGoEBT3xR0O8lSFwzo5RXRkumlRrq5jIuNfVavZ7c4ZudV+F Wo+th3Iwn40RRd8zxo/dgpNU7bLxHYv/oeP+lp5jzrpHdaHqoNsE8AuuqtBEwSGwPy0A3y dI/CXyB15aOlaiAxSKsTjs49QGhDdG4= Received: from mail-wr1-f72.google.com (mail-wr1-f72.google.com [209.85.221.72]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-114-p5SlfkMcOQyToC_GrPKdKg-1; Sat, 14 Nov 2026 07:16:28 -0500 X-MC-Unique: p5SlfkMcOQyToC_GrPKdKg-1 X-Mimecast-MFC-AGG-ID: p5SlfkMcOQyToC_GrPKdKg_1794658587 Received: by mail-wr1-f72.google.com with SMTP id ffacd0b85a97d-49090fde23aso1762560f8f.2 for ; Sat, 14 Nov 2026 04:16:28 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1794658587; x=1795263387; h=date:content-transfer-encoding:content-type:mime-version :organization:references:in-reply-to:message-id:subject:cc:to:from :x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to:content-type; bh=DJ3N99PFgFzE4oznHM5PTZLax+uXtJaxnXoQ4G1Uazg=; b=vgf2ta+S+nOZFDYg9Z3t6Yfdv1WZBeZFg/zAhBxKgVgs++nxDNpKmmrb+3RUilq00f 9dg3cEAkRyHHOaYS8wLDkNYRylws4A59RKsrt691IGT9cfdRIRW2Xfp/AYh83+eln4bA 2aANxWuWSjPyU2AZxx/7IACBgBjlGTyCIg58B3wJxjv67AXmgOCbh+K08bCFebKgd9SA Sp/q7xMxCIXoLABkz36PzyMLoBiHuZENxRPQmZkt48ObWkgritYK1F2lbJEI5BMevDfz muse/eC8Go1dX/TyjZF5eiHYR6NBGuT8sOhK+MyNnzFQuVP2iJzC2O66Petdxejl5ck2 vTnA== X-Gm-Message-State: APuU4Z8NtEiSgndg0Yj2yhdMASXqZRkkEprKi1//7f1kLKlPCBlrsES5 8k/EuJQ1tkPepkGf85Z0+CcpMDiMxLYViHWGMODNU0RRVwBXEn+rCfItk2KkS1zC6KO9lCVywnd OL/sSKtCJfK8VSgaoBrPsyWwFoE+20QnAT5N95O5RhyolvnaTiV2dIal5AnDDFK5Dx+4WkGhpYO BGCDOeNRIW7F3a6GXFryyEH7v2Dx5k3I3XcL85 X-Gm-Gg: AYBFou1nI+pnaRf5wYqyNBJfupL6ZpdiAg/xQY3kwxLCq46L7MPuBBeOyP9fnvr28N5 eY9j489InTLmhLwF9n920ikHV503WbdP7p1rZnPNXd4KB6ID3hpw+MIrAimd62IOsx3d3uBbhjg E1llTARWuCssG44DcAK0B1/qaO2hgzE0B905V58i/bFOaK+uZJZtoU0y4f0djiHXZGquJL+gn3s O4Tr6y9bTi/BLEfXGZ4dqYR/ddCw93gtY5yr6heb3zA24Ru9fX3aiDE4HaAA+J1pQclU/1mg0wT 2czXF5JvgyeA+2eDrqHA2cBhc6XOabpCvybDcBgqTX8o8w0bpcy56E1m4Aa7pEAxbDKADs0H3Nv D3nCtKdFHhUJa4JHsESDbZWe2Fo0FXpLipHFHYi8suaZX9EjjtYiNvxiCDNtdBzTNODR+dpzPhm cuW+gZ2vxf X-Received: by 2002:a5d:5887:0:b0:48d:fd4d:7fbf with SMTP id ffacd0b85a97d-49c6d4539d5mr13064082f8f.4.1794658587089; Sat, 14 Nov 2026 04:16:27 -0800 (PST) X-Received: by 2002:a5d:5887:0:b0:48d:fd4d:7fbf with SMTP id ffacd0b85a97d-49c6d4539d5mr13064023f8f.4.1794658586511; Sat, 14 Nov 2026 04:16:26 -0800 (PST) Received: from maya.myfinge.rs (ifcgrfdd.trafficplex.cloud. [176.103.220.4]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-49d69c21a17sm6348483f8f.50.2026.11.14.04.16.25 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 14 Nov 2026 04:16:25 -0800 (PST) From: Stefano Brivio To: me@yueyinqiu.top Subject: Re: [PATCH v4 2/2] conf, icmp, tcp, udp: Add options to bind to outbound address and interface Message-ID: <20261114131624.319fbeab@elisabeth> In-Reply-To: <179463200525.2887.15950519702333489150@maja> References: <20230309020947.2609964-3-sbrivio@redhat.com> <179463200525.2887.15950519702333489150@maja> Organization: Red Hat X-Mailer: Claws Mail 4.2.0 (GTK 3.24.49; x86_64-pc-linux-gnu) MIME-Version: 1.0 Date: Sat, 14 Nov 2026 13:16:25 +0100 (CET) X-Mimecast-Spam-Score: 0 X-Mimecast-MFC-PROC-ID: -hcFRaId_21skgi4VpbZxu_YBxb1tesSRKotbxzQwXA_1794658587 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Message-ID-Hash: 3REDDPX6DS5LVZBU2IVT6LP7D4S67IO6 X-Message-ID-Hash: 3REDDPX6DS5LVZBU2IVT6LP7D4S67IO6 X-MailFrom: sbrivio@redhat.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: passt-dev@passt.top X-Mailman-Version: 3.3.8 Precedence: list List-Id: Development discussion and patches for passt Archived-At: Archived-At: List-Archive: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Hi, On Sat, 14 Nov 2026 04:53:25 -0000 me@yueyinqiu.top wrote: > Hi, > > I ran into exactly the use case this series addresses: I run a > rootless podman container that is itself a VPN client (Sangfor > aTrust), on a host that also has a single-user tun (sing-box with > auto_route). That tun captures all host egress via policy routing (ip > rule), so pasta's outbound forwarding for my container gets hijacked > -- the VPN tunnel ends up going through the host tun instead of > directly out the physical NIC. > > I noticed this series (v4) got a Reviewed-by from David but never > seems to have been merged. Is it still the plan? What's it blocked on > -- a rebase against the current tree? I'm happy to help if needed. This was merged indeed, more than three years ago, see: https://passt.top/passt/commit/?id=a9c59dd91baa6315259328fc0e36ac63a61ab24b I guess some of that doesn't work for you anymore? -- Stefano