On Wednesday 2010-07-21 15:46, Sergei Zhirikov wrote: > On 2010-07-20 18:56, ratheesh k wrote: >> >> After decapsulation , will the ip packet will traverse prerouting chain again >> ? > > I don't know for sure, but I would think that yes. You could perform a simple > experiment to know for sure. As per http://jengelh.medozas.de/images/nf-packet-flow.png , yes it will. This also makes sense for transport mode, to strip the AH header or to decrypt ESP. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
