Re: packets dropped when using MASQ and QUEUE

["Mattias Rönnblom" <hofors@lysator.liu.se>]

"Jannes Faber" <jafaber@zonnet.nl> writes:

> I experimented again with the scripts I wrote to do this, but it really
> doesn't work. If you NF_ACCEPT a packet without altering it, there is no
> problem and the masquerading works ok. But as soon as you try to NF_ACCEPT
> an altered packet it gets lost.
>
> On the other hand when you send a packet to the box itself (so there is no
> NAT), it works perfectly: including the altered packets.
> 
> I tried to refind the articles I read about it a few months back, but I
> couldn't find them again.
> 
> I think what you need is a new target that can alter the packets in
> kernel-space for you. Like the TOS target can alter the TOS bits, you need
> something like a REPLACE target or maybe even a REGEXP target. There already
> exists a string match extension (in patch-o-matic I think) that lets you
> search through the packet contents, but as far as I know not something to
> alter the packets.
> 

I'm in no need of any new targets. I don't want to alter any packets,
but rather only delay and occansionally drop packets. QUEUE would
work fine, if I only could get it to really work.

Kind regards,
        Mattias