From: tonton19 <tonton19@voila.fr>
To: blancher@cartel-securite.fr, netfilter@lists.netfilter.org
Subject: Re: Re: ROUTE + SNAT Problem
Date: Thu, 5 Feb 2004 11:12:40 +0100 (CET) [thread overview]
Message-ID: <16887300.1075975960758.JavaMail.www@wwinf4006> (raw)
> As far as I can remember, use of ROUTE target stops NF_IP_POST_ROUTING
> crossing to send packet directly. For mangle table is prior to nat one,
> then SNAT rules are not evaluated.
> You should have a look to very last patch-o-matic (maybe still CVS)
> where ROUTE target include a special option for continue hook traversal.
> See :
>
> http://cvs.netfilter.org/netfilter/patch-o-matic/extra/ROUTE.patch
>
> "Updated version with new option to continue rule-traversal
> (Cedric de Launois)"
>
>
I made a little test and I think you're right : it seems to be ok with --continue option in the ROUTE target :
# iptables -t mangle -A POSTROUTING -d 173.20.0.210 -p tcp --dport 80 -j ROUTE --oif eth0 --continue
Merci beaucoup de ton aide !
gwen
------------------------------------------
Faites un voeu et puis Voila ! www.voila.fr
reply other threads:[~2004-02-05 10:12 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=16887300.1075975960758.JavaMail.www@wwinf4006 \
--to=tonton19@voila.fr \
--cc=blancher@cartel-securite.fr \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox