Re: Iptables v1.4.4 + kernel 2.6.31 mangle marking changed?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



2009/11/10 Ralph de Boom <lkml@xxxxxxxxxx>:
> Ralph de Boom schreef:
Nov  5 18:48:14 sakura kernel: [  194.028598] TRACE:
filter:FORWARD:rule:1 IN=eth1 OUT=eth0 SRC=192.168.1.30
DST=81.4.97.160 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=13005 DF
PROTO=TCP SPT=52436 DPT=80 SEQ=2949910603 ACK=0 WINDOW=8192 RES=0x00
SYN URGP=0 OPT (0204116C01010402) MARK=0x1

Ralph, only the entry above is from one of your iptable rules which
looks like the rules you are using to carry out the packet
mangling/nat/etc are not being hit - all the others are 'policy'
entries which are basically just saying oh look I went via 'x using
chain y'....



-- 
Richard Horton
Users are like a virus: Each causing a thousand tiny crises until the
host finally dies.
http://www.solstans.co.uk - Solstans Japanese Bobtails and Norwegian Forest Cats
http://www.pbase.com/arimus - My online photogallery
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux