All of lore.kernel.org
 help / color / mirror / Atom feed
* chain/table traversal for loopback packets
@ 2010-05-13 18:19 Curby
  2010-05-13 19:52 ` Pascal Hambourg
  2010-05-13 19:53 ` Jan Engelhardt
  0 siblings, 2 replies; 4+ messages in thread
From: Curby @ 2010-05-13 18:19 UTC (permalink / raw)
  To: netfilter

Hello, I'm trying to understand
http://www.frozentux.net/iptables-tutorial/images/tables_traverse.jpg

Would a packet created locally and sent over the loopback interface
traverse the POSTROUTING and PREROUTING hooks as implied by the
diagram, or does the last Routing Decision notice that it's bound for
the local host and send it straight to the beginning of the INPUT
hook?  Thanks!

--Mike

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: chain/table traversal for loopback packets
  2010-05-13 18:19 chain/table traversal for loopback packets Curby
@ 2010-05-13 19:52 ` Pascal Hambourg
  2010-05-13 19:53 ` Jan Engelhardt
  1 sibling, 0 replies; 4+ messages in thread
From: Pascal Hambourg @ 2010-05-13 19:52 UTC (permalink / raw)
  To: Curby; +Cc: netfilter

Hello,

Curby a écrit :
> Hello, I'm trying to understand
> http://www.frozentux.net/iptables-tutorial/images/tables_traverse.jpg
> 
> Would a packet created locally and sent over the loopback interface
> traverse the POSTROUTING and PREROUTING hooks as implied by the
> diagram,

Yes. However be aware that the nat/PREROUTING chain is skipped even for
the first packet of a new connection because at that stage the
connection is already confirmed. Thus destination NAT must be performed
in OUTPUT.

> or does the last Routing Decision notice that it's bound for
> the local host and send it straight to the beginning of the INPUT
> hook?

No.

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: chain/table traversal for loopback packets
  2010-05-13 18:19 chain/table traversal for loopback packets Curby
  2010-05-13 19:52 ` Pascal Hambourg
@ 2010-05-13 19:53 ` Jan Engelhardt
  2010-05-13 20:00   ` Curby
  1 sibling, 1 reply; 4+ messages in thread
From: Jan Engelhardt @ 2010-05-13 19:53 UTC (permalink / raw)
  To: Curby; +Cc: netfilter

On Thursday 2010-05-13 20:19, Curby wrote:

>Hello, I'm trying to understand
>http://www.frozentux.net/iptables-tutorial/images/tables_traverse.jpg
>
>Would a packet created locally and sent over the loopback interface
>traverse the POSTROUTING and PREROUTING hooks as implied by the
>diagram, or does the last Routing Decision notice that it's bound for
>the local host and send it straight to the beginning of the INPUT
>hook?  Thanks!

No shortcuts.
BTW, follow http://jengelh.medozas.de/images/nf-packet-flow.png

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: chain/table traversal for loopback packets
  2010-05-13 19:53 ` Jan Engelhardt
@ 2010-05-13 20:00   ` Curby
  0 siblings, 0 replies; 4+ messages in thread
From: Curby @ 2010-05-13 20:00 UTC (permalink / raw)
  To: netfilter

Thanks, everyone!  I've been able to ignore ebtables for now, but I
think it may be time to familiarize myself with it. =P

--Mike

^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2010-05-13 20:00 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-05-13 18:19 chain/table traversal for loopback packets Curby
2010-05-13 19:52 ` Pascal Hambourg
2010-05-13 19:53 ` Jan Engelhardt
2010-05-13 20:00   ` Curby

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.