From mboxrd@z Thu Jan 1 00:00:00 1970 From: Patrick McHardy Subject: Re: [net-next PATCH 15/16] iptables TPROXY target Date: Thu, 02 Oct 2008 11:28:52 +0200 Message-ID: <48E49454.9070506@trash.net> References: <20081001142431.4893.48078.stgit@este> <20081001142431.4893.51517.stgit@este> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Cc: David Miller , netdev@vger.kernel.org, netfilter-devel@vger.kernel.org To: KOVACS Krisztian Return-path: In-Reply-To: <20081001142431.4893.51517.stgit@este> Sender: netfilter-devel-owner@vger.kernel.org List-Id: netdev.vger.kernel.org KOVACS Krisztian wrote: > The TPROXY target implements redirection of non-local TCP/UDP traffic to local > sockets. Additionally, it's possible to manipulate the packet mark if and only > if a socket has been found. (We need this because we cannot use multiple > targets in the same iptables rule.) > > Applied, thanks.