Jozsef Kadlecsik writes: > On Wed, 2 Jun 2004, Kevin D. White wrote: > > > Netfilter is made up of 5 subsystems, Pre-routing, > > Input, Forward, Output and Post-routing. These > > subsystems are governed by three tables, nat, magle, > > filter. The elements of these tables have the ... > Sorry, but the wording used above is incorrect and misleading. > > Netfilter is *not* made of five subsystems and PREROUTING etc are > definitely not subsystems of netfilter. Jozsef is correct, of course. In addition, recent kernels have a fourth table, the "raw" table, with its own PREROUTING and OUTPUT chains. Joszef is the originator of the raw table but apparently is too modest to mention it. > Hooks, built-in chains, subsystems and tables are well covered in the > howtos and the tutorials. Please read them. I would second that advice. What Kevin was attempting is already done well and correctly in the online documentation. Please don't fill the list archives with unnecessary explanations - especially incorrect ones. -- Dick St.Peters, stpeters@xxxxxxxxxxxxx