accounting NAT-ed packets

accounting NAT-ed packets

[Piotrek Kaczmarek]

Hello,

I want to account all traffic from the address assigned to the linux box
(including NAT, locally generated traffic), but i can't. The rule
iptables -t mangle -A POSTROUTING -s 213.25.213.42
seems not to ,,catch'' NAT-ed packets, only locally generated traffic.

Is there any method to ,,catch'' packets after NAT with netfilter?

Best Regards,

-- 
Piotr Kaczmarek

Re: accounting NAT-ed packets

[George Alexandru Dragoi]

Yea, in mangle POSTROUTING, or in filter FORWARD the packets which are
going to be nat-ed. nat table counts only the first packet from a
stream


On Sun, 19 Dec 2004 11:12:57 +0100, Piotrek Kaczmarek
<kaczorek@k.daleka.net> wrote:
> Hello,
> 
> I want to account all traffic from the address assigned to the linux box
> (including NAT, locally generated traffic), but i can't. The rule
> iptables -t mangle -A POSTROUTING -s 213.25.213.42
> seems not to ,,catch'' NAT-ed packets, only locally generated traffic.
> 
> Is there any method to ,,catch'' packets after NAT with netfilter?
> 
> Best Regards,
> 
> --
> Piotr Kaczmarek
> 
> 


-- 
Bla bla

Re: accounting NAT-ed packets

[Piotrek Kaczmarek]

On Sun, Dec 19, 2004 at 11:12:57AM +0100, Piotrek Kaczmarek wrote:
> Hello,
> 
> I want to account all traffic from the address assigned to the linux box
> (including NAT, locally generated traffic), but i can't. The rule
> iptables -t mangle -A POSTROUTING -s 213.25.213.42
> seems not to ,,catch'' NAT-ed packets, only locally generated traffic.
> 
> Is there any method to ,,catch'' packets after NAT with netfilter?

I've found a solution. I've added POSTROUTING chain to the raw table but with
higher priority than a nat table, so it is now possible to intercept
packets with nat-ed source addresses. You can download patch from
http://k.daleka.net/iptable_raw.patch

Could you consider applying this? I couldn't find other solution to do this.

-- 
Piotrek Kaczmarek