Re: MASQ nightmare - 99% solved

Tom Eastep
Fri, 29 Feb 2008 22:02:56 -0000

> On Fri, Feb 29, 2008 at 6:58 PM, Tom Eastep <teastep@shorewall.net>
wrote:
>> Guilsson . wrote:
>>  > In fact, my doubt is more "generic", not specific do
H.323.
>>  > If you have a module loaded in kernel, what is the precedence ?
>>  > Rules are processed before or after module takes place,
considering,
>>  > in this case (H.323) the module "try" to do Nat on the
traffic ?
>>
>>  The module can do whatever it wants to.
>
> But before of after iptables handling it ?
>

That question has no meaningful answer. iptables doesn''t handle
packets.
Netfilter does. And modules modify the behavior of netfilter.

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key