PREROUTING vs INPUT&FORWARD v iptables

Miroslav Petricek mirek na petricek.cz
Středa Prosinec 12 16:05:00 CET 2001


On Wed, Dec 12, 2001 at 02:31:50PM +0100, Ing. Pavel PaJaSoft Janousek wrote:
> 
> 	Na iptables nejsem expert, ale z logiky veci bych si dovolil
> pripomenout, ze ve forward (nebo nekde okolo'-)) muze dojit ke zmene SRC
> adresy => nevynechal bych pravidlo ani v POSTROUTING...
> 

Zahazovani paketu v POSTROUTINGu neni IMHO nutne, protoze paket se
spoofnutou adresou by nemel projit PREROUTINGem (FORWARDem).


-- 
/*     Miroslav Petricek           mirek na petricek.cz
       Brno, Czech Rep.            ICQ: 56183467
---- http://www.petricek.cz/ --------------------------
    It's entirely untested, but it looks good and
        compiles. Ship it!            - Linus Torvalds               */


Další informace o konferenci Linux