On Friday 12 September 2003 21:07, Szálka Tamás wrote:
> At 18:58 2003. 09. 12. +0200, you wrote:
> > > With the IMQ NAT patch the order is reversed? The filtering on
> > > de-masqueraded addresses is only possible, if NAT is b e f o r e IMQ,
> > > isn't it? Tom
> >
> >The nat in prerouting is also reponsible for rewriting the addresses of
> >natted
> >packets. So you want IMQ after nat so the packets entering the imq device
> >have the real ip address.
> >
> >Stef
>
> What do mean by "real ip address"? So when the packet arrives into the imq,
> the address in the packet is the local (i.e. 10.0.0.x) address?
Yes. At least it should.
Stef
--
stef.coene@xxxxxxxxx
"Using Linux as bandwidth manager"
http://www.docum.org/
#lartc @ irc.oftc.net
_______________________________________________
LARTC mailing list / LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
