From: Arthur Ulfeldt <arthur@untangle.com>
To: netfilter <netfilter@vger.kernel.org>, netfilter@netfilter.org
Subject: using libnetfilter-conntrack to redirect tcp sessions
Date: Mon, 22 Oct 2007 13:04:25 -0700 (PDT) [thread overview]
Message-ID: <15390174.378371193083465887.JavaMail.root@zimbra.untangle.com> (raw)
for our project (untangle.com) we NFQUEUE packets and then decide where they need to go.
Our current attempt is to then once we have decided on the destination for a packet to delete
the conntrack entry corresponding to this packet and then create a new one that will cause this to be
redirected. My attempts to recreate a redirect entry have thus far failed probably because I don't understand
the mechanism by which nat entries are created and the relation between NAT entries and conntrack entries.
perhaps somebody on this list can enlighten me?
are NAT entries and conntrack entries the same thing?
can I do nat by creating conntrack entries?
can I change the destination of a DNAT or SNAT entry by changing or replacing its conntrack entry?
can I change a SNAT entry into a DNAT entry by changing or replacing its conntrack entry?
PS: is this the correct list to ask such a question?
yours confusedly,
Arthur Ulfeldt
arthur@untangle.com
next reply other threads:[~2007-10-22 20:04 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-10-22 20:04 Arthur Ulfeldt [this message]
-- strict thread matches above, loose matches on Subject: below --
2007-10-22 18:30 using libnetfilter-conntrack to redirect tcp sessions Arthur Ulfeldt
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=15390174.378371193083465887.JavaMail.root@zimbra.untangle.com \
--to=arthur@untangle.com \
--cc=netfilter@netfilter.org \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox