Re: ebtables ACCEPT policy vs ACCEPT target

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Friday 2010-12-17 03:16, Robert Pipca wrote:
>
>Trying to setup a web proxy, I did:
>
>iptables -t nat -A PREROUTING -i br0 -p tcp --dport 80 -j REDIRECT
>--to-port 1501
>
>And "iptables -t nat -L -v " shows no packets seen by iptables.
>Since "ebtables -t broute -L" shows me a empty BROUTING chain with
>ACCEPT as the policy, everything is fine.

If the above is fine to you, why would you even execute these two:

>ebtables -t broute -A BROUTING -i eth1 -p ipv4 --ip-proto tcp
>--ip-dport 80  -j redirect --redirect-target ACCEPT
>ebtables -t broute -A BROUTING -i eth2 -p ipv4 --ip-proto tcp
>--ip-sport 80  -j redirect --redirect-target ACCEPT
>
>"iptables -t nat -L -v" now sees HTTP traffic.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux