Re: Re: ROUTE + SNAT Problem

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> As far as I can remember, use of ROUTE target stops NF_IP_POST_ROUTING
> crossing to send packet directly. For mangle table is prior to nat one,
> then SNAT rules are not evaluated.
> You should have a look to very last patch-o-matic (maybe still CVS)
> where ROUTE target include a special option for continue hook traversal.
> See :
> 
> http://cvs.netfilter.org/netfilter/patch-o-matic/extra/ROUTE.patch
> 
> 	"Updated version with new option to continue rule-traversal
> 	 (Cedric de Launois)"
> 
> 

I made a little test and I think you're right : it seems to be ok with --continue option in the ROUTE target :
# iptables -t mangle -A POSTROUTING -d 173.20.0.210 -p tcp --dport 80 -j ROUTE --oif eth0 --continue
Merci beaucoup de ton aide !
gwen
------------------------------------------

Faites un voeu et puis Voila ! www.voila.fr 




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux