Re: iptables NEW TABLE request. WAS[Re: Catching un-DNAT'ed packets]

[Jan Engelhardt <jengelh@linux01.gwdg.de>]

>http://www.meteor.dp.ua/casper/firewill.pdf
>
>how would I make a "feature request" to ask for, say, "mangle2" table
>that is just after "nat" in POSTROUTING? The only reason for this move
>is the need for ability to catch un-DNAT'ed packets with -j ULOG or
>(better) to -j QUEUE.

And  -t nat -A POSTROUTING -m conntrack ! --ctstate DNAT
as a last rule won't do?


        -`J'
--