From mboxrd@z Thu Jan 1 00:00:00 1970 From: aoliva Subject: Re: Pleeeeeeeease help: question about ip_queue Date: Tue, 10 Oct 2006 17:36:44 +0200 Message-ID: <452BBE0C.2060402@it.uc3m.es> References: <1160491318.4059.18.camel@mfarooq-1.tango-networks.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <1160491318.4059.18.camel@mfarooq-1.tango-networks.com> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii"; format="flowed" To: Mohammad Farooq Cc: netfilter@lists.netfilter.org Hi all, I think you can do what you want by storing the message in the module, dropping the current one and after the specific time sending it again. Regards Antonio Mohammad Farooq wrote: > Hi, > > I hope someone familiar with ip_queue can clarify the functioning of the > ip_queue. I wrote a simple test program, what all it does read packets > from the queue, hold a packet and accept it later. Here is the logic: > > read message from the ip_queue > save message id > read message from the ip_queue > accept current message > read message from the ip_queue > accept current message > read message from the ip_queue > accept current message > read message from the ip_queue > accept current message > read message from the ip_queue > accept current message > **accept saved message using the saved message id > accept current message > read message from the ip_queue > accept current message > > When I accept the saved message, it just disappears. My question is, can > we hold packets and accept them sometimes in the future? Thanks. > > MF > > Note: here is my iptable rules: > iptables -t nat -A PREROUTING -p udp -s 192.168.82.140 -d 192.168.75.51 > --dport 7862 -j DNAT --to 192.168.82.140:7862 > iptables -t nat -A POSTROUTING -p udp -s 192.168.82.140 -d > 192.168.82.140 --dport 7862 -j SNAT --to 192.168.75.51:7862 > > echo 1 > /proc/sys/net/ipv4/ip_forward > iptables -A FORWARD -p udp -j QUEUE > > > > >