All of lore.kernel.org
 help / color / mirror / Atom feed
From: Pascal Hambourg <pascal@plouf.fr.eu.org>
To: netfilter@vger.kernel.org
Subject: Re: Order of iptables vs. ip6tables chains
Date: Fri, 23 Jan 2015 23:58:49 +0100	[thread overview]
Message-ID: <54C2D229.1000108@plouf.fr.eu.org> (raw)
In-Reply-To: <20150123225143.GB3522@blackhole.tracing.lan>

Thomas Preissler a écrit :
> 
> On Fri, Jan 23, 2015 at 11:38:28PM +0100, Noel Kuntze wrote:
>> Also, IPv4 traffic is only handled by iptables rules and IPv6 traffic
>> obviously only by ip6tables rules. iptables only handles ip traffic, not decnet or any
>> other fancy layer three protocol.
> 
> But where does ip6tables fit in here?

In the same places as iptables.

> Does it first run through the
> whole netfilter stack as in [1], and then for v6, or is it doing it
> in some mixed way:
> 
> 1) mangle PREROUTING v4
> 2) mangle PREROUTING v6
> 3) mangle INPUT v4
> 4) mangle INPUT v6
> 5) filter INPUT v4
> 6) filter INPUT v6

What is unclear in "IPv4 traffic is only handled by iptables rules and
IPv6 traffic obviously only by ip6tables rules" ?

> and so on (I skipped NAT... as there is no v6 NAT (haha - I know)).

There is.

  reply	other threads:[~2015-01-23 22:58 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2015-01-23 22:31 Order of iptables vs. ip6tables chains Thomas Preissler
2015-01-23 22:38 ` Noel Kuntze
2015-01-23 22:38   ` Noel Kuntze
2015-01-23 22:51   ` Thomas Preissler
2015-01-23 22:58     ` Pascal Hambourg [this message]
2015-01-23 22:59     ` Noel Kuntze

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=54C2D229.1000108@plouf.fr.eu.org \
    --to=pascal@plouf.fr.eu.org \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.