netfilter after about (linux kernel) 2.4.x (or 2.6.x?) [1] can put SNAT into hook NF_IP_LOCAL_IN. However, official docs(including 'man') doesn't change, so far. It's hard to me to write something correctly and precisely in English. Would someone improve the docs please? ps: Maybe add some descriptions about 'where did the de-SNAT and de-DNAT processes placed.' is a good idea. [1] http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c68cd6cc21eb329c47ff020ff7412bf58176984e -- IV.26.16 Lion Yang -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html