All of lore.kernel.org
 help / color / mirror / Atom feed
From: Anders Fugmann <afu@fugmann.dhs.org>
To: netfilter@lists.samba.org
Subject: mangle tables.
Date: Tue, 10 Sep 2002 08:49:56 +0200	[thread overview]
Message-ID: <3D7D9614.1040205@fugmann.dhs.org> (raw)

Hi all

I'm lookin at the new mangles tables as of 2.4.18, and fail to
understand excatly packets traverse these chains.

the manpage says:
      Since kernel 2.4.18, three other built-in chains are  also
      supported  :  INPUT  (for  packets  coming  into the box itself),
      FORWARD (for altering packets being routed through the box), and
      POSTROUTING (for altering packets as they are about to go out).

Am I correct in the following:
Packets going through the firewall (forwarded):
PREROUTING,....,FORWARD,....,POSTROUTING.

Packets originating from the firewall itself:
	OUTPUT,...,POSTROUTING.

Packets destined for the firewall itself:
	PREROUTING,...,INPUT.

Next, is the above is correct, when does packets hit the chains,
e.g. what chains are traversed between PREROUTING and FORWARD and 
POSTROUTING, in the forwarding example?

Thanks in advance
Anders Fugmann

-- 
Author of FIAIF
FIAIF Is An Intelligent/Iptables Firewall
http://fiaif.fugmann.dhs.org



             reply	other threads:[~2002-09-10  6:49 UTC|newest]

Thread overview: 9+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2002-09-10  6:49 Anders Fugmann [this message]
2002-09-10  9:38 ` mangle tables Antony Stone
2002-09-10 10:05   ` Anders Fugmann
2002-09-10 10:12     ` Antony Stone
2002-09-10 10:41     ` Stewart Thompson
2002-09-10 11:09       ` Antony Stone
2002-09-10 13:04       ` Anders Fugmann
2002-09-10 20:18         ` Stewart Thompson
2002-09-10 22:18           ` Anders Fugmann

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=3D7D9614.1040205@fugmann.dhs.org \
    --to=afu@fugmann.dhs.org \
    --cc=netfilter@lists.samba.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.