Re: Userspace queuing

[Fallucchi Antonio <fallucch@cisbic.com>]

hi,

i use libipq and "QUEUE" for read the SYN  pachet sent from local 
application...
now I must REDIRECT all packet (width nat) to a local service (proxy).

I have configure the netfilter:

*nat
:PREROUTING ACCEPT [4:240]
:POSTROUTING ACCEPT [22:1306]
:OUTPUT ACCEPT [18:1066]
-A OUTPUT -d ! 127.0.0.1 -p tcp -m tcp --dport 80 ! --tcp-flags SYN SYN 
-j DNAT --to-destination 127.0.0.1:80
-A OUTPUT -d ! 127.0.0.1 -p tcp -m tcp --dport 80 --tcp-flags SYN SYN -j 
QUEUE
COMMIT

or

*nat
:PREROUTING ACCEPT [4:240]
:POSTROUTING ACCEPT [22:1306]
:OUTPUT ACCEPT [18:1066]
-A OUTPUT -d ! 127.0.0.1 -p tcp -m tcp --dport 80 --tcp-flags SYN SYN -j 
QUEUE
-A OUTPUT -d ! 127.0.0.1 -p tcp -m tcp --dport 80 ! --tcp-flags SYN SYN 
-j DNAT --to-destination 127.0.0.1:80
COMMIT

in all the solution the packets bypass the nat rule..
there is other solution ??

Ulysses Almeida wrote:

>Sorry, I forgot the link http://www.glug.ucdb.br/~ulysses/libipq.html
>
>  Regards
>
>On Mon, Jun 28, 2004 at 10:17:21AM +0300, Muhammad R. Sami wrote:
>  
>
>>Thanks Henrik for your help, I have 2 questions, first of all I could not
>>find anyway to extract and read packet payload through libipq, I know it has
>>a function to do so but how to use it (any examples??) and secondly is there
>>any implementation of priority queues (multiple FIFOs) at userspace using
>>libipq. If you can help me on these, I would be thankful. 
>>Regards,
>>
>>
>>
>>    
>>
>
>  
>