>
> With the IMQ NAT patch the order is reversed? The filtering on
> de-masqueraded addresses is only possible, if NAT is b e f o r e IMQ, isn't
> it? Tom
The nat in prerouting is also reponsible for rewriting the addresses of natted
packets. So you want IMQ after nat so the packets entering the imq device
have the real ip address.
Stef
What do mean by "real ip address"? So when the packet arrives into the imq, the address in the packet is the local (i.e. 10.0.0.x) address?
Thanks
Tom
_______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
