* [LARTC] iptables diagram (ex: ipchains + mark in output chain ?)
@ 2002-06-18 7:13 Ciprian Niculescu
0 siblings, 0 replies; only message in thread
From: Ciprian Niculescu @ 2002-06-18 7:13 UTC (permalink / raw)
To: lartc
so you say that are 3 routing decision:
- after nat prerouting
- after local_process, and before mangle output
- before nat postrouting
what is the use of the routing decision after local process???
C
Julian Anastasov wrote:
> Hello,
>
> On Mon, 17 Jun 2002, Ciprian Niculescu wrote:
>
>
>>aa ok, so why the subject is ipchains? :-)
>>
>
> I'm just replying to the proposed iptables diagram.
>
>
>>>>http://people.unix-fu.org/andreasson/iptables-tutorial/images/tables_traverse.jpg
>>>>
>>>>
>>> Another wrong picture for iptables
>>>
>>
>>why???
>>
>
> Read my posting again. The routing decision is before
> OUTPUT not after OUTPUT. It should be looking something like:
>
> local process -> output routing -> OUTPUT+output_rerouting(s) -> ...
>
> Another problem: to what routing decision refers the diagram
> after forward?
>
> The forwarding should be:
>
> prerouting -> input routing -> forward -> post_routing
>
> Another bug, this time in the netfilter sources (iptable_mangle.c):
>
> output_rerouting called from INPUT
>
>
>>C
>>
>
> Regards
>
> --
> Julian Anastasov <ja@ssi.bg>
>
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2002-06-18 7:13 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2002-06-18 7:13 [LARTC] iptables diagram (ex: ipchains + mark in output chain ?) Ciprian Niculescu
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).