Re: Problem with IPtables/Netfilter hooks

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 2003-02-18 at 13:40, paridhi bansal wrote:
> Hi!!
> 
> I am a newbie to iptables...I was trying to understand
> the hooks defined in netfilter.With natting enabled,
> every pkt shld ideally come to Prerouting hook and
> then only move to input hook if it is for local m/c
> itself or forward hook if it is to be forwardedand
> finally to postrouting..
> This is what i have understood..and i hope this is
> correct..If not,,pls correct me and give ur comments..
> 
PREROUTING and POSTROUTING are only used when the packet is not destined
for the local host... correct.

> But my analysis of pkts says that sometimes, the pkts
> meant for the local machine come directly to the input
> hook rather than the prerouting hook..Is it
> right?????Is yes, why/when does this happen??If no,
> can what can be the case when this happens??
> 
That is correct. Since the packets are destined for the local host,
there is no routing (or forwarding).

> Paridhi
> 
> 
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Shopping - Send Flowers for Valentine's Day
> http://shopping.yahoo.com
-- 
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
(  Raymond Leach                       )
 ) Knowledge Factory                  (
(                                      )
 ) Tel: +27 11 445 8100               (
(  Fax: +27 11 445 8101                )
 )                                    (
(  http://www.knowledgefactory.co.za/  )
 ) http://www.saptg.co.za/            (
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   o                                o
    o                              o
        .--.                  .--.
       | o_o|                |o_o |
       | \_:|                |:_/ |
      / /   \\              //   \ \
     ( |     |)            (|     | )
     /`\_   _/'\          /'\_   _/`\
     \___)=(___/          \___)=(___/

Attachment: signature.asc
Description: This is a digitally signed message part


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux