* using libnetfilter-conntrack to redirect tcp sessions
@ 2007-10-22 18:30 Arthur Ulfeldt
0 siblings, 0 replies; 2+ messages in thread
From: Arthur Ulfeldt @ 2007-10-22 18:30 UTC (permalink / raw)
To: netfilter
for our project (untangle.com) we NFQUEUE packets and then decide where they need to go.
Our current attempt is to then once we have decided on the destination for a packet to delete
the conntrack entry corresponding to this packet and then create a new one that will cause this to be
redirected. My attempts to recreate a redirect entry have thus far failed probably because I don't understand
the mechanism by which nat entries are created and the relation between NAT entries and conntrack entries.
perhaps somebody on this list can enlighten me?
are NAT entries and conntrack entries the same thing?
can I do nat by creating conntrack entries?
can I change the destination of a DNAT or SNAT entry by changing or replacing its conntrack entry?
can I change a SNAT entry into a DNAT entry by changing or replacing its conntrack entry?
PS: is this the correct list to ask such a question?
yours confusedly,
Arthur Ulfeldt
arthur@untangle.com
^ permalink raw reply [flat|nested] 2+ messages in thread
* using libnetfilter-conntrack to redirect tcp sessions
@ 2007-10-22 20:04 Arthur Ulfeldt
0 siblings, 0 replies; 2+ messages in thread
From: Arthur Ulfeldt @ 2007-10-22 20:04 UTC (permalink / raw)
To: netfilter, netfilter
for our project (untangle.com) we NFQUEUE packets and then decide where they need to go.
Our current attempt is to then once we have decided on the destination for a packet to delete
the conntrack entry corresponding to this packet and then create a new one that will cause this to be
redirected. My attempts to recreate a redirect entry have thus far failed probably because I don't understand
the mechanism by which nat entries are created and the relation between NAT entries and conntrack entries.
perhaps somebody on this list can enlighten me?
are NAT entries and conntrack entries the same thing?
can I do nat by creating conntrack entries?
can I change the destination of a DNAT or SNAT entry by changing or replacing its conntrack entry?
can I change a SNAT entry into a DNAT entry by changing or replacing its conntrack entry?
PS: is this the correct list to ask such a question?
yours confusedly,
Arthur Ulfeldt
arthur@untangle.com
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2007-10-22 20:04 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-10-22 20:04 using libnetfilter-conntrack to redirect tcp sessions Arthur Ulfeldt
-- strict thread matches above, loose matches on Subject: below --
2007-10-22 18:30 Arthur Ulfeldt
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox