Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #2074

Re: iptables string match

Show all headers | View raw

On Mon, 01 Apr 2013 19:49:28 +0000, buck wrote:

> Is it possible to match a string in nat table PREROUTING?  I suspect
> PREROUTING only sees new connections, so the content of the packet
> cannot be examined.

PREROUTING sees all packets before routing, however, the nat table sees 
only the first packet of each connection.

> 
> If not in nat, can mangle be used to mark packets matching a string>  If

Should work.

> so, can such a marked patcket be DNATted?  How?

Yes and no. What do you want to achieve? If it is not the first packet of 
a "connection", DNATting proabably does not do what you want.

M4

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

iptables string match buck <buck@private.mil> - 2013-04-01 19:49 +0000
  Re: iptables string match Martijn Lievaart <m@rtij.nl.invlalid> - 2013-04-01 23:50 +0200
    Re: iptables string match buck <buck@private.mil> - 2013-04-01 22:36 +0000
      Re: iptables string match Martijn Lievaart <m@rtij.nl.invlalid> - 2013-04-02 19:52 +0200

csiph-web