[tproxy] A general question on xt_socket

Arun Srinivasan hi2arun at gmail.com
Tue Oct 28 13:52:55 CET 2008


Hi all,

A general question:

Say I have the following rules configured:

+++++++++++++++++++++++++++++
iptables -t mangle -N DIVERT
iptables -t mangle -I PREROUTING -p tcp -m socket -j DIVERT
iptables -t mangle -A DIVERT -j MARK --set-mark 0x1
iptables -t mangle -A DIVERT -j ACCEPT
++++++++++++++++++++++++++++++++++++

In which case can the tcp packets go without hitting the rule
"iptables -t mangle -I PREROUTING -p tcp -m socket -j DIVERT"?

-- 
Regards,
Arun S.


More information about the tproxy mailing list