Re: MASQ nightmare - 99% solved

Guilsson .
Fri, 29 Feb 2008 22:12:14 -0000

Sorry for the mistake to use the word IPTABLES instead of NETFILTER.

On Fri, Feb 29, 2008 at 7:02 PM, Tom Eastep <teastep@shorewall.net>
wrote:
>
> Guilsson . wrote:
>  > On Fri, Feb 29, 2008 at 6:58 PM, Tom Eastep
<teastep@shorewall.net> wrote:
>  >> Guilsson . wrote:
>  >>  > In fact, my doubt is more "generic", not specific
do H.323.
>  >>  > If you have a module loaded in kernel, what is the
precedence ?
>  >>  > Rules are processed before or after module takes place,
considering,
>  >>  > in this case (H.323) the module "try" to do Nat
on the traffic ?
>  >>
>  >>  The module can do whatever it wants to.
>  >
>  > But before of after iptables handling it ?
>  >
>
>  That question has no meaningful answer. iptables doesn''t handle
packets.
>  Netfilter does. And modules modify the behavior of netfilter.
>
>
>
>  -Tom
>  --
>  Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
>  Shoreline,     \ http://shorewall.net
>  Washington USA  \ teastep@shorewall.net
>  PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key
>
>
> -------------------------------------------------------------------------
>  This SF.net email is sponsored by: Microsoft
>  Defy all challenges. Microsoft(R) Visual Studio 2008.
>  http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
>  Shorewall-users mailing list
>  Shorewall-users@lists.sourceforge.net
>  https://lists.sourceforge.net/lists/listinfo/shorewall-users