On Friday 2008-05-09 12:48, Andrea Ranieri wrote: >On 5/8/08, Grant Taylor wrote: > >> NAT rules are applied to the first packet in a connection and then the >> same action is auto-magically applied to all other packets in the >> connection with out passing them through the NAT table. >> >> So what you are seeing is probably very likely based on existing verses >> new connections. > >Thanks for your reply, but it seems I didn't explain my problem clearly. >I have a connectionless flow of ipv4 packets. No TCP, UDP or any L4 >payload at all. >So my question now is: does netfilter (with D/SNAT or NETMAP target) >provide basic natting features without having a L4 payload, or a >connection oriented flow is required for natting? Yes, it can do generic NAT -- which is actually used for things like IPsec-ESP, IP-in-IP. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html