Re: How can i leave a packet to continue the iptables ruleset checking?

[Patrick McHardy <kaber@trash.net>]

ilninno wrote:
> Hello! I have some problems with netfilter_queue:
> 
> I created a queue and registered my c program, when a packet matchs
> with the iptables rules my code get the event. i usually return
> NF_ACCEPT and NF_DROP, but sometimes i need to leave the packet to
> continue with iptables rules checking, i tried with:
> 
> 1- Using NF_QUEUE: WIth this option the packet enter again in iptables
> rules (from rule 1 to NFQUEUE rule), but i only want to check (from
> NFQUEUE rule to end).
> 
> 
> rule:   $IPTABLES -A OUTPUT -m state --state NEW -j NFQUEUE --queue-num 0
> 
> 
> 
> How can i leave the packet to continue in iptables ruleset without
> beginning again?  Thanks for your time.

You can use NF_REPEAT to enter the same chain again and mark
the packet to skip the first rules or jump to a seperate chain.