Re: [nfqueue] verdict NF_ACCEPT doesn't continue

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Eric Leblond wrote, On 2011-11-30 09:07:
Hello,

Le mercredi 30 novembre 2011 à 08:58 +0100, U.Mutlu a écrit :
nfq_set_verdict() or nfq_set_verdict2():
    NF_DROP    discard the packet
    NF_ACCEPT  the packet passes, continue iterations

In my callback I pass NF_ACCEPT to let the packet continue its travel
through the subsequent rules (normal iptables rules).

When NF_ACCEPT is issued, the packet is accepted for the current table.
It will then only be checked by rules in other tables.

I need to just inspect the hdrs and then let it continue its usual way.
What is needed to realize this functionality?


--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux