From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andrew Beverley Subject: Re: facing problem with iptables nat rules and traffic flow scnerios Date: Fri, 04 May 2012 18:09:23 +0100 Message-ID: <1336151363.1912.97.camel@andrew-desktop> References: Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit Cc: netfilter-devel@vger.kernel.org, netfilter@vger.kernel.org To: rahul shrivastava Return-path: In-Reply-To: Sender: netfilter-owner@vger.kernel.org List-Id: netfilter-devel.vger.kernel.org [ Please use the netfilter not netfilter-devel list for this sort of question ] On Thu, 2012-05-03 at 14:25 +0530, rahul shrivastava wrote: > I am using iptables for nat > kernel version is 2.6.35+ > working on powerpc target > > case 1) traffic is already flowing and we apply a rule, that rule will > become effective only when we stop traffic and start again. > > case 2) traffic is already flowing and we delete a rule, this rule > will still be effective unless we stop and start traffic again. > > observation: /proc/net/ip_conntrack file is updated only after stoping > and starting traffic again. Depending what you are doing, this shouldn't happen. How are you applying the rules? Directly with iptables commands? If so, what are the commands? For some rules, such as port redirection, I have found that the conntrack cache needs to be cleared. Andy