* MASQUERADE and QUEUE target. Can they be used together?
@ 2003-04-27 2:28 Worik
0 siblings, 0 replies; only message in thread
From: Worik @ 2003-04-27 2:28 UTC (permalink / raw)
To: netfilter
Friends
I have about a weeks experience now with iptables, and am having a ball
with it. But I have run into a brick wall.
I am using a MASQUERADE target for machines on my lan.
I want to pipe all packets that are masqueraded through my user space
process.
So my rules are...
iptables -t nat -L POSTROUTING
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- anywhere anywhere
QUEUE all -- 192.168.0.0/24 anywhere
Problem is that I the QUEUE never sees the packets. But nowhaere in the
docs that I can find does it state that if a MASQUERADE target is
matched does processing in the chain stop.
Am I missing something?
My user space Queue process (using libipq) works, but I can only ACCEPT
(NF_ACCEPT) or DROP (NF_DROP via ipq_set_verdict()) packets, both of
which *do* stop processing in the chain, so reversing the order of the
rules will not work.
Questions:
Does a match on a rule with a MASQUERADE target stop processing in the
chain?
(If so) does a match on *any* rule stop processing in the chain? LOG
doesn't, so the answer must be no.
Should I be using ULOG? I am having difficulty tracking down any
documentation on ulogd (I have installed it from a Debian package, but
there is no indication of how to get data out of it. I have a ULOG
target and there is nothing in /var/log/ulogd*)
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2003-04-27 2:28 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2003-04-27 2:28 MASQUERADE and QUEUE target. Can they be used together? Worik
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox