Reverse Nat and ICMP packet

Reverse Nat and ICMP packet

[Giant Sand Fan's]

Hi:


I've a netfilter module that unpack a icmp packet and then there is a
NAT to internet but in the back there is a problem the NAT don't do
anything in prerouting.
The question is the reverse is done with a match for address and what
else? , i cannot no see it. I supposse that the macht is not done and
then the reverse is not done too, perhaps the id or sequence fields of
icmp are involved too.

Any clue, thanks anyway.




-- 
Please avoid sending me Word or PowerPoint attachments.
See http://www.gnu.org/philosophy/no-word-attachments.html

Re: Reverse Nat and ICMP packet

[Giant Sand Fan's]

Hi,

I answer to myself.

The problem was that our hook that do the unpack was after -less
priority , higher number- that conntrack -both in prerouting- so in
the back the packet was a different one that the one conntrack saves.

The solution, just put with a priority NF_IP_PRI_CONNTRACK+1 .

Thanks.


2009/1/29 Giant Sand Fan's <rampxxxx@gmail.com>:
> Hi:
>
>
> I've a netfilter module that unpack a icmp packet and then there is a
> NAT to internet but in the back there is a problem the NAT don't do
> anything in prerouting.
> The question is the reverse is done with a match for address and what
> else? , i cannot no see it. I supposse that the macht is not done and
> then the reverse is not done too, perhaps the id or sequence fields of
> icmp are involved too.
>
> Any clue, thanks anyway.
>
>
>
>
> --
> Please avoid sending me Word or PowerPoint attachments.
> See http://www.gnu.org/philosophy/no-word-attachments.html
>



-- 
Please avoid sending me Word or PowerPoint attachments.
See http://www.gnu.org/philosophy/no-word-attachments.html