NetFilter
[Top] [All Lists]

Catching un-DNAT'ed packets

To: netfilter@lists.netfilter.org
Subject: Catching un-DNAT'ed packets
From: Покотиленко Костик <casper@meteor.dp.ua>
Date: Mon, 25 Dec 2006 15:40:30 +0200
Delivered-to: sp-com-lists@consult.net
Delivered-to: netfilter-list1@securepoint.com
List-archive: </pipermail/netfilter>
List-help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-id: General discussion and user questions <netfilter.lists.netfilter.org>
List-post: <mailto:netfilter@lists.netfilter.org>
List-subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
Organization: СК "Метеор"
Reply-to: casper@meteor.dp.ua
Sender: netfilter-bounces@lists.netfilter.org
Hi.

Is it possible to catch un-DNAT'ed packets with iptables' -j ULOG
target? Where does the un-DNAT occurs and is there table/chain that is
processed after un-DNAT?

The problem I have is that replay packets got catched with real source
address, not the one the client has initially connected to. I was
catching replay packets in mangle/POSTROUTING.


-- 
Покотиленко Костик <casper@meteor.dp.ua>



<Prev in Thread] Current Thread [Next in Thread>