On Saturday 11 October 2003 08:16, zain arrifa'i wrote: > I have several local networks connected to internet > via a gateway, acting as SNAT box as well as shaper > box. > > in some occasions, I got confused about which one is > executed first inside the kernel; the SNAT rules > postrouting chain, or the tc filter rules that > classify packet for shaping/queueing. > > I need to know which source address I should use in > the tc filter rules, the local IP source, or the > public IP that used for SNAT. > > I have tried to look at tc -s ..show command result, > or iptables -L result, but I'm not convinced yet. > > anybody has nice explanations about that? Tc is the last thing that's done with a packet. So after SNAT and postrouting. Also see the KPTD (Kernel Packet Traveling Diagram) page at docum.org. Stef -- stef.coene@xxxxxxxxx "Using Linux as bandwidth manager" http://www.docum.org/ #lartc @ irc.openprojects.net _______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/