From mboxrd@z Thu Jan  1 00:00:00 1970
From: "Daniel K." <daniel@yaTack.com>
Date: Tue, 14 May 2002 15:20:14 +0000
Subject: Re: [LARTC] iproute + mark question
Message-Id: <marc-lartc-102138976018044@msgid-missing>
List-Id: <lartc.vger.kernel.org>
References: <marc-lartc-102138771915888@msgid-missing>
In-Reply-To: <marc-lartc-102138771915888@msgid-missing>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: lartc@vger.kernel.org

Ciprian Niculescu wrote:
> does anybody have the hole packet path, a grafic, with: mangle, nat, 
> filter, routing, tc, tunel, for local generated pachetd and for 
> FORWARDed pachets???

This is how IPTables look like.

           /----------\         /-------\         /-----------\
IN--->---< PREROUTING >--->---< FORWARD >--->---< POSTROUTING >--->--OUT
           \----------/         \-------/         \-----------/
              \                                            /
               \                                          /
             /-----\         /-------------\         /------\
            < INPUT >--->---< LOCAL PROCESS >--->---< OUTPUT >
             \-----/         \-------------/         \------/


Maybe you should read some of Rusty's Remarkably Unreliable Guides
http://netfilter.samba.org/unreliable-guides/

In particular, section 6 of Linux 2.4 Packet Filtering HOWTO
http://netfilter.samba.org/unreliable-guides/packet-filtering-HOWTO/packet-filtering-HOWTO.linuxdoc.html


Daniel K.

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/