REDIRECT

Henrik Nordstrom hno at marasystems.com
Mon Dec 13 16:59:40 CET 2004


On Mon, 13 Dec 2004, r00t wrote:

> Ok, but if i use this:
>
> -A PREROUTING -p tcp -j QUEUE
> -A PREROUTING -i eth1 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128

You can't. QUEUE terminates the PREROUTING hook.

You need to queue before nat PREROUTING if you want to apply NAT rules on 
packets after QUEUE reinjects them to the kernel, i.e. from mangle or raw 
tables.

Regards
Henrik



More information about the netfilter-devel mailing list