From mboxrd@z Thu Jan 1 00:00:00 1970 From: Henrik Nordstrom Subject: Re: The big Picture of all the tables ... Date: Sun, 5 Jun 2005 23:48:44 +0200 (CEST) Message-ID: References: <3abe8064b60ddf1a@mayday.cix.co.uk> <42A218B8.8060504@outerspace.dyndns.org> <5559d90e8cb32fad@mayday.cix.co.uk> <42A22703.5090000@outerspace.dyndns.org> Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: netfilter-devel@lists.netfilter.org Return-path: To: Jonas Berlin In-Reply-To: <42A22703.5090000@outerspace.dyndns.org> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org On Sat, 4 Jun 2005, Jonas Berlin wrote: > I mean > > iptables ... -j QUEUE > > I don't know where in the chain it should/can go.. NF_QUEUE (aka -j QUEUE in iptables) can be returned by any netfilter hook handler, and terminates that handler/table. When the packet returns from the queue it continues at the next handler/table in the same hook or leaves the hook as usual if there is no more to process in this hook. Note: this is not limited to iptables. The above applies to any netfilter modules as QUEUE is a core netfilter function, not an iptables function. Regards Henrik