Re: new nat target extension --jump rt_lookup

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, Jul 26, 2003 at 02:36:46PM +0200, lartc@xxxxxxxxxxxxxxxxxxx wrote:

> hi all,
> 
> just wondering what everyone would think about
> 
> iptables --append POSTROUTING or OUTPUT --table nat --jump rt_lookup
> 
> 
> this would ask for a new route lookup as a packet traverses the nat
> table (done once) and would enable the effective marking/routing of
> locally generated packets, as well as determining a potentially new
> out-interface after natting.
> 
> can anyone comment on potential problems/dangers/issues from such a
> --jump?

An infinite loop, maybe? Also, OUTPUT is before routing anyway...

My 2c.
Ramin

> 
> cheers
> 
> charles
> 
> 
> 
> 
> 
> 
> 
> 
> 


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux