[LARTC] iptables diagram (ex: ipchains + mark in output chain ?)

[LARTC] iptables diagram (ex: ipchains + mark in output chain ?)

[Ciprian Niculescu]

so you say that are 3 routing decision:
- after nat prerouting
- after local_process, and before mangle output
- before nat postrouting

what is the use of the routing decision after local process???

C

Julian Anastasov wrote:

> 	Hello,
> 
> On Mon, 17 Jun 2002, Ciprian Niculescu wrote:
> 
> 
>>aa ok, so why the subject is ipchains? :-)
>>
> 
> 	I'm just replying to the proposed iptables diagram.
> 
> 
>>>>http://people.unix-fu.org/andreasson/iptables-tutorial/images/tables_traverse.jpg
>>>>
>>>>
>>>	Another wrong picture for iptables
>>>
>>
>>why???
>>
> 
> 	Read my posting again. The routing decision is before
> OUTPUT not after OUTPUT. It should be looking something like:
> 
> local process -> output routing -> OUTPUT+output_rerouting(s) -> ...
> 
> Another problem: to what routing decision refers the diagram
> after forward?
> 
> The forwarding should be:
> 
> prerouting -> input routing -> forward -> post_routing
> 
> Another bug, this time in the netfilter sources (iptable_mangle.c):
> 
> output_rerouting called from INPUT
> 
> 
>>C
>>
> 
> Regards
> 
> --
> Julian Anastasov <ja@ssi.bg>
> 



_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/