Re: accounting NAT-ed packets

[Piotrek Kaczmarek <kaczorek@k.daleka.net>]

On Sun, Dec 19, 2004 at 11:12:57AM +0100, Piotrek Kaczmarek wrote:
> Hello,
> 
> I want to account all traffic from the address assigned to the linux box
> (including NAT, locally generated traffic), but i can't. The rule
> iptables -t mangle -A POSTROUTING -s 213.25.213.42
> seems not to ,,catch'' NAT-ed packets, only locally generated traffic.
> 
> Is there any method to ,,catch'' packets after NAT with netfilter?

I've found a solution. I've added POSTROUTING chain to the raw table but with
higher priority than a nat table, so it is now possible to intercept
packets with nat-ed source addresses. You can download patch from
http://k.daleka.net/iptable_raw.patch

Could you consider applying this? I couldn't find other solution to do this.

-- 
Piotrek Kaczmarek