Le 24/07/2016 à 12:19, Guy German a écrit :
OK, I think I got it now :-) For each session the destination IP address is kept as part of the session identifier key as well ?
Yes.
So, for my example, there are 2 unique entries in the NAT table, without the need for UDP src port change.
Yes, except it is not only a NAT table but a conntrack table, which keeps track of all connections even without NAT.
However, if 2.1.1.1 will send a packet to 10.0.0.2, a 3rd entry will be created, this time with the src UDP 4500 changed to some "new-port" in order to distinguish from the 2nd entry (in which destination address is same 10.0.0.2) ? While the 2nd entry will continue to handle packets 10.0.0.2/4500->10.0.0.101/4500, the 3rd entry will handle packets 10.0.0.2/4500->10.0.0.101/"new-port". Am I right ?
Yes. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
