for our project (untangle.com) we NFQUEUE packets and then decide where they need to go. Our current attempt is to then once we have decided on the destination for a packet to delete the conntrack entry corresponding to this packet and then create a new one that will cause this to be redirected. My attempts to recreate a redirect entry have thus far failed probably because I don't understand the mechanism by which nat entries are created and the relation between NAT entries and conntrack entries. perhaps somebody on this list can enlighten me? are NAT entries and conntrack entries the same thing? can I do nat by creating conntrack entries? can I change the destination of a DNAT or SNAT entry by changing or replacing its conntrack entry? can I change a SNAT entry into a DNAT entry by changing or replacing its conntrack entry? PS: is this the correct list to ask such a question? yours confusedly, Arthur Ulfeldt arthur@xxxxxxxxxxxx - To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
