Hi, I answer to myself. The problem was that our hook that do the unpack was after -less priority , higher number- that conntrack -both in prerouting- so in the back the packet was a different one that the one conntrack saves. The solution, just put with a priority NF_IP_PRI_CONNTRACK+1 . Thanks. 2009/1/29 Giant Sand Fan's <rampxxxx@xxxxxxxxx>: > Hi: > > > I've a netfilter module that unpack a icmp packet and then there is a > NAT to internet but in the back there is a problem the NAT don't do > anything in prerouting. > The question is the reverse is done with a match for address and what > else? , i cannot no see it. I supposse that the macht is not done and > then the reverse is not done too, perhaps the id or sequence fields of > icmp are involved too. > > Any clue, thanks anyway. > > > > > -- > Please avoid sending me Word or PowerPoint attachments. > See http://www.gnu.org/philosophy/no-word-attachments.html > -- Please avoid sending me Word or PowerPoint attachments. See http://www.gnu.org/philosophy/no-word-attachments.html -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
