state matching vrs prerouting.... ???

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Firewall Snipet

# Experimental UDP Filters
#
# iptables -A INPUT -p udp -i eth0 -m state --state NEW,INVALID -j DROP
# iptables -A INPUT -p udp -i eth0 -m state --state ESTABLISHED,RELATED -j
ACCEPT

# CounterStrike NAT Line
#
iptables -t nat -A PREROUTING -p udp --dport 27015 -i eth0 -j DNAT
--to-destination 192.168.1.25:27015

Ok the UDP filters physically come before my CounterStrike line. In reading
Oskar's tutorial I as under the impression that the nat tables rules took
precedence before the filter tables.... However the UDP rules drop the incoming
CS       
requests before they are prerouted... What gives? 

=====
"No touchy NO TOUCHY! Emperor Kuzko -=Emperor's New Groove=-"

__________________________________________________
Do you Yahoo!?
Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop!
http://platinum.yahoo.com


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux