* How can i leave a packet to continue the iptables ruleset checking?
@ 2008-12-23 21:02 ilninno
2009-01-01 20:55 ` ilninno
2009-01-12 5:10 ` Patrick McHardy
0 siblings, 2 replies; 4+ messages in thread
From: ilninno @ 2008-12-23 21:02 UTC (permalink / raw)
To: netfilter-devel
Hello! I have some problems with netfilter_queue:
I created a queue and registered my c program, when a packet matchs
with the iptables rules my code get the event. i usually return
NF_ACCEPT and NF_DROP, but sometimes i need to leave the packet to
continue with iptables rules checking, i tried with:
1- Using NF_QUEUE: WIth this option the packet enter again in iptables
rules (from rule 1 to NFQUEUE rule), but i only want to check (from
NFQUEUE rule to end).
rule: $IPTABLES -A OUTPUT -m state --state NEW -j NFQUEUE --queue-num 0
How can i leave the packet to continue in iptables ruleset without
beginning again? Thanks for your time.
^ permalink raw reply [flat|nested] 4+ messages in thread
* How can i leave a packet to continue the iptables ruleset checking?
2008-12-23 21:02 How can i leave a packet to continue the iptables ruleset checking? ilninno
@ 2009-01-01 20:55 ` ilninno
2009-01-01 23:12 ` Eric Leblond
2009-01-12 5:10 ` Patrick McHardy
1 sibling, 1 reply; 4+ messages in thread
From: ilninno @ 2009-01-01 20:55 UTC (permalink / raw)
To: netfilter-devel
Hello! I have some problems with netfilter_queue:
I created a queue and registered my c program, when a packet matchs
with the iptables rules my code get the event. i usually return
NF_ACCEPT and NF_DROP, but sometimes i need to leave the packet to
continue with iptables rules checking, i tried with:
1- Using NF_QUEUE: WIth this option the packet enter again in iptables
rules (from rule 1 to NFQUEUE rule), but i only want to check (from
NFQUEUE rule to end).
rule: $IPTABLES -A OUTPUT -m state --state NEW -j NFQUEUE --queue-num 0
How can i leave the packet to continue in iptables ruleset without
beginning again? Thanks for your time.
Please, someone can help me
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: How can i leave a packet to continue the iptables ruleset checking?
2008-12-23 21:02 How can i leave a packet to continue the iptables ruleset checking? ilninno
2009-01-01 20:55 ` ilninno
@ 2009-01-12 5:10 ` Patrick McHardy
1 sibling, 0 replies; 4+ messages in thread
From: Patrick McHardy @ 2009-01-12 5:10 UTC (permalink / raw)
To: ilninno; +Cc: netfilter-devel
ilninno wrote:
> Hello! I have some problems with netfilter_queue:
>
> I created a queue and registered my c program, when a packet matchs
> with the iptables rules my code get the event. i usually return
> NF_ACCEPT and NF_DROP, but sometimes i need to leave the packet to
> continue with iptables rules checking, i tried with:
>
> 1- Using NF_QUEUE: WIth this option the packet enter again in iptables
> rules (from rule 1 to NFQUEUE rule), but i only want to check (from
> NFQUEUE rule to end).
>
>
> rule: $IPTABLES -A OUTPUT -m state --state NEW -j NFQUEUE --queue-num 0
>
>
>
> How can i leave the packet to continue in iptables ruleset without
> beginning again? Thanks for your time.
You can use NF_REPEAT to enter the same chain again and mark
the packet to skip the first rules or jump to a seperate chain.
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2009-01-12 5:11 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2008-12-23 21:02 How can i leave a packet to continue the iptables ruleset checking? ilninno
2009-01-01 20:55 ` ilninno
2009-01-01 23:12 ` Eric Leblond
2009-01-12 5:10 ` Patrick McHardy
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.