From: Pascal Hambourg <pascal.mail@plouf.fr.eu.org>
Cc: netfilter@vger.kernel.org
Subject: Re: postrouting and mac address
Date: Tue, 21 Jul 2009 15:59:11 +0200 [thread overview]
Message-ID: <4A65C9AF.9040504@plouf.fr.eu.org> (raw)
In-Reply-To: <4A65C470.60301@duet.it>
Fabio Marcone a écrit :
>
>> It is possible (DROP exists in all tables), but should not be done.
> I know that drop is only in INPUT, FORWARD and OUTPUT chain...
This is not quite correct. DROP is available in all tables and chains.
However the "orthodoxy" is to do filtering only in the 'filter' table.
>> Can't you MARK packets in earlier chains (PREROUTING or FORWARD) and
>> use the mark in POSTROUTING ?
>
> perhaps it is the only solution but I would to recognize packets in
> POSTROUTING to send them in a IMQ virtual interface.
What is the problem in using a mark to do this ?
prev parent reply other threads:[~2009-07-21 13:59 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2009-07-21 12:05 postrouting and mac address Fabio Marcone
2009-07-21 12:20 ` Julien Vehent
2009-07-21 13:10 ` Fabio Marcone
2009-07-21 13:24 ` Fabio Marcone
2009-07-21 13:30 ` Pascal Hambourg
2009-07-21 13:36 ` Fabio Marcone
2009-07-21 13:53 ` Gáspár Lajos
2009-07-21 13:59 ` Pascal Hambourg [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4A65C9AF.9040504@plouf.fr.eu.org \
--to=pascal.mail@plouf.fr.eu.org \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox