From mboxrd@z Thu Jan 1 00:00:00 1970 From: Stef Coene Date: Sat, 11 Oct 2003 09:45:01 +0000 Subject: Re: [LARTC] which executed first, tc or netfilter Message-Id: List-Id: References: In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org On Saturday 11 October 2003 08:16, zain arrifa'i wrote: > I have several local networks connected to internet > via a gateway, acting as SNAT box as well as shaper > box. > > in some occasions, I got confused about which one is > executed first inside the kernel; the SNAT rules > postrouting chain, or the tc filter rules that > classify packet for shaping/queueing. > > I need to know which source address I should use in > the tc filter rules, the local IP source, or the > public IP that used for SNAT. > > I have tried to look at tc -s ..show command result, > or iptables -L result, but I'm not convinced yet. > > anybody has nice explanations about that? Tc is the last thing that's done with a packet. So after SNAT and postrouting. Also see the KPTD (Kernel Packet Traveling Diagram) page at docum.org. Stef -- stef.coene@docum.org "Using Linux as bandwidth manager" http://www.docum.org/ #lartc @ irc.openprojects.net _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/