using libnetfilter-conntrack to redirect tcp sessions

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



for our project (untangle.com) we NFQUEUE packets and then decide where they need to go.
Our current attempt is to then once we have decided on the destination for a packet to delete 
the conntrack entry corresponding to this packet and then create a new one that will cause this to be 
redirected. My attempts to recreate a redirect entry have thus far failed probably because I don't understand 
the mechanism by which nat entries are created and the relation between NAT entries and conntrack entries.
perhaps somebody on this list can enlighten me?

are NAT entries and conntrack entries the same thing?

can I do nat by creating conntrack entries?

can I change the destination of a DNAT or SNAT entry by changing or replacing its conntrack entry?

can I change a SNAT entry into a DNAT entry by changing or replacing its conntrack entry?

PS: is this the correct list to ask such a question?

yours confusedly,
  Arthur Ulfeldt
  arthur@xxxxxxxxxxxx
  


-
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux