All of lore.kernel.org
 help / color / mirror / Atom feed
From: Eduardo Costa <ecosta@tpk.com.br>
To: Henrik Nordstrom <hno@marasystems.com>
Cc: netfilter-devel@lists.netfilter.org
Subject: Re: using libipq to create a router
Date: Tue, 23 Sep 2003 22:45:54 +0000	[thread overview]
Message-ID: <3F70CD22.3020606@tpk.com.br> (raw)
In-Reply-To: <Pine.LNX.4.44.0309240330140.5618-100000@filer.marasystems.com>

So, what happens if I want to NAT a trivial protocol, like HTTP ?

BTW, is there any "hello world" example for conntrack ? I've played 
creating kernel modules pretty easy, but the documentation about 
creating new routing nat targets are poor. The only good examples are 
'masquerade' and 'redirect', but they lack comments.

Thanks,
Eduardo Costa

Henrik Nordstrom wrote:

>You can't NAT non-trivial protocols via libipq unless you are implementing
>the full conntrack+nat in your application and not using the kernel
>conntrack/nat support at all (must not be loaded into the kernel). Any NAT
>done via libipq does not play well together with conntrack and the
>iptables nat engine is completely unaware of your packet modifications.
>
>For NAT together with iptables conntrack/nat you really need to use kernel
>modules in the nat iptable.
>
>Regards
>Henrik
>
>
>
>  
>

  reply	other threads:[~2003-09-23 22:45 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-09-23 22:25 using libipq to create a router Eduardo Costa
2003-09-24  1:36 ` Henrik Nordstrom
2003-09-23 22:45   ` Eduardo Costa [this message]
2003-10-11 20:32     ` Henrik Nordstrom

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=3F70CD22.3020606@tpk.com.br \
    --to=ecosta@tpk.com.br \
    --cc=hno@marasystems.com \
    --cc=netfilter-devel@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.