Displaying 1 result from an estimated 1 matches for "ipcad_out".
2006 Dec 15
1
catching DNAT''ed packet
..., I can ulog the packet''s in "state seen by users" only in
client->server direction, and I was unable to do that in server-clients
direction!
Here are iptables rules (I don''t want to ulog packets to/from the router
itself):
iptables -t mangle -A PREROUTING -i br0 -j IPCAD_out
iptables -t mangle -A POSTROUTING -o br0 -j IPCAD_in
iptables -t mangle -A IPCAD_out -d 10.10.100.1 -j RETURN
iptables -t mangle -A IPCAD_out -d 192.168.1.1 -j RETURN
iptables -t mangle -A IPCAD_out -j ULOG --ulog-nlgroup 10
iptables -t mangle -A IPCAD_in -s 10.10.100.1 -j RETURN
iptables -t mang...