We are having an issue with accessing devices on a 169.254.x.x from within a bridge container. Wireshark captures indicate that the bridge-> host network flow is rewriting the header for the ICMP packets to use the IP of the interface where the default gateway resides (192.168.x.x) while using the hardware address (mac) of the interface that is on the 169.254.x.x network. The responding device then has no path back to the 192.168.x.x as there is no default gateway configured since this is a link-local address space. Is there a clean way of forcing the header rewrite to use the 169.254.x.x address? I’ve tried iptables POSTROUTING SNAT rules but they don’t appear to apply to the bridge containers. Any ideas?