Re: Location of conntrack in process

On Thursday 21 August 2003 15:14, Scott MacKay wrote:
> Hello!
>    Sorry if this is a repeat question.  I want to
> mangle packet contents in a userspace module for
> packets coming thru the host.  In my mangling, I will
> keep the packet header normal (so src/dst/ports), but
> the actual data content will get mangled.  I need to
> demangle the packet before connection tracking is
> performed (since the contents will be garbled).
>    For mangling it seems easy, call the userspace
> module during POSTROUTING.
>    Where should I put the de-mangling code?  I am
> unclear which stage will suffice for the unmangling.
> PREROUTING?

Conntrack is performed on PREROUTING and POSTROUTING. On PREROUTING it has 
priority -200, see include/linux/netfilter_ipv4.h
Btw, this question belongs on netfilter-devel.

cheers,
Bart



-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0