From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Tsachi Sharfman" Subject: Deleting Connection Tracking information Date: Mon, 8 Jul 2002 14:31:26 +0200 Sender: netfilter-admin@lists.samba.org Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C2267B.609B96BC" Return-path: content-class: urn:content-classes:message Errors-To: netfilter-admin@lists.samba.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.samba.org, netfilter-devel@lists.samba.org This is a multi-part message in MIME format. ------_=_NextPart_001_01C2267B.609B96BC Content-Type: text/plain; charset="WINDOWS-1255" Content-Transfer-Encoding: quoted-printable Hi, =20 I would like to add a NAT rule on a gateway while connections are = passing through it, and have the rule apply to existing connections. I = understand this is not the behavior when the rule is simply added to the = NAT table, since netfilter consults the NAT table only for the first = packet of the connection. I assume that if I can delete connection = tracking information on the gateway, once a packet belonging to an = existing connection passes through the gateway netfilter will regard it = as a new connection (since there is no connection tracking information = for it), and apply the new NAT rules that existing connection. My = questions are: =20 1. Is my assumption correct? 2. Is the answer to the first question is yes, how can I delete = connection tracking information? =20 Thanks, Tsachi Sharfman. ------_=_NextPart_001_01C2267B.609B96BC Content-Type: text/html; charset="WINDOWS-1255" Content-Transfer-Encoding: quoted-printable

Hi,

 

I would like to add a NAT rule on a gateway while connections are passing through it, and have the rule apply to existing connections. I understand this is not the behavior when the rule is = simply added to the NAT table, since netfilter consults the NAT table only for = the first packet of the connection. I assume that if I can delete connection tracking information on the gateway, once a packet belonging to an = existing connection passes through the gateway netfilter will regard it as a new connection (since there is no connection tracking information for it), = and apply the new NAT rules that existing connection. My questions = are:

 

  1. Is my assumption correct?
  2. Is the answer to the first question is yes, how = can I delete connection tracking information?

 

Thanks,

Tsachi Sharfman.

=00 ------_=_NextPart_001_01C2267B.609B96BC--