08-03-2014
Multi-table iptables Question
I have a question regarding IPTables packet flow, that I am hoping I can get an answer to.
We have a fairly advanced implementation of IPTables that I am trying to convert into a third party product and I am not quite certain on the packet flow in the current IPTables implementation.
We are using Mangle, NAT and Filter tables - and my question is this:
We have a PREROUTING chain defined in Mangle AND NAT tables. If a rule is matched with a -j of ACCEPT in the Mangle PREROUTING chain, does the packet still flow to the NAT PREROUTING chain? Or does it just go to the FORWARD chain and skip any other PREROUTING chains in other tables?
That is the missing piece of logic in my head and I would love to have that answered, thank you.
8 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
Hi,
I have a linux machine connected to 2 networks, with devices eth0 and eth1.
When I give the command host whatever, how do I now which network is searched for the DNS's ? Is there a default ethernet device for network related commands ? How do I change it ? :confused: (2 Replies)
Discussion started by: mik
2 Replies
2. Programming
Assume we have an application built on *nix that uses fork()...then the processes procedure is going to act as follow:
X is considered a parent process (first click on application)
Y is considered a child process of X (second click on application)
Z is considered a child process of Y (third... (6 Replies)
Discussion started by: f.ben.isaac
6 Replies
3. Red Hat
I have below routing table in linux kernel 2.6.9
# netstat -rn
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
10.155.24.0 0.0.0.0 255.255.252.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U ... (5 Replies)
Discussion started by: chuikingman
5 Replies
4. IP Networking
Hi,
We currently operate a DHCP Server on Vxworks system.
It seems that the server is functioning only over the boot interface.
While trying to use it on a different interface the DHCP client messages seems to reach the interface but stay without response.
From a... (1 Reply)
Discussion started by: zohara
1 Replies
5. UNIX for Advanced & Expert Users
Hello,
I'm having problem with an iptables rule. It seems that on one of two systems on the nat table, the INPUT chain doesn't exist for some strange reason.
I get the error below:
# iptables -t nat -A INPUT -j ACCEPT
iptables: No chain/target/match by that name.
Here is my kernel on... (0 Replies)
Discussion started by: Narnie
0 Replies
6. Shell Programming and Scripting
Hi,
I have a problem where I need to make this input:
nameRow1a,text1a,text2a,floatValue1a,FloatValue2a,...,floatValue140a
nameRow1b,text1b,text2b,floatValue1b,FloatValue2b,...,floatValue140b
look like this output:
nameRow1a,text1b,text2a,(floatValue1a - floatValue1b),(floatValue2a -... (4 Replies)
Discussion started by: nricardo
4 Replies
7. Shell Programming and Scripting
awk -F "" '/<Id>|<id>|<Source>|<source>|<Accession>|<accession>|<TestName>|<testname>/ {print $2, $3}' OFS='\t' Test.xml
The above code works great, but lets say I wanted the <Analyte> name (<Name>STAT3). The word <name> is unique so there will be multiple records pulled. Is there a way to... (8 Replies)
Discussion started by: cmccabe
8 Replies
8. Programming
I am trying to write a large X app. I have successfully modified my xorg.conf to setup 4 monitors on an NVIDIA Quatro5200. I am trying to modify a simple hello world application to open a window on three of the four monitors. depending on the changes to loop the window creation section and event... (2 Replies)
Discussion started by: advorak
2 Replies
LEARN ABOUT MOJAVE
net::dns::question
Net::DNS::Question(3) User Contributed Perl Documentation Net::DNS::Question(3)
NAME
Net::DNS::Question - DNS question record
SYNOPSIS
use Net::DNS::Question;
$question = new Net::DNS::Question('example.com', 'A', 'IN');
DESCRIPTION
A Net::DNS::Question object represents a record in the question section of a DNS packet.
METHODS
new
$question = new Net::DNS::Question('example.com', 'A', 'IN');
$question = new Net::DNS::Question('example.com');
$question = new Net::DNS::Question('192.0.32.10', 'PTR', 'IN');
$question = new Net::DNS::Question('192.0.32.10');
Creates a question object from the domain, type, and class passed as arguments. One or both type and class arguments may be omitted and
will assume the default values shown above.
RFC4291 and RFC4632 IP address/prefix notation is supported for queries in both in-addr.arpa and ip6.arpa namespaces.
decode
$question = decode Net::DNS::Question($data, $offset);
($question, $offset) = decode Net::DNS::Question($data, $offset);
Decodes the question record at the specified location within a DNS wire-format packet. The first argument is a reference to the buffer
containing the packet data. The second argument is the offset of the start of the question record.
Returns a Net::DNS::Question object and the offset of the next location in the packet.
An exception is raised if the object cannot be created (e.g., corrupt or insufficient data).
encode
$data = $question->encode( $offset, $hash );
Returns the Net::DNS::Question in binary format suitable for inclusion in a DNS packet buffer.
The optional arguments are the offset within the packet data where the Net::DNS::Question is to be stored and a reference to a hash table
used to index compressed names within the packet.
name
$name = $question->name;
Internationalised domain name corresponding to the qname attribute.
Decoding non-ASCII domain names is computationally expensive and undesirable for names which are likely to be used to construct further
queries.
When required to communicate with humans, the 'proper' domain name should be extracted from a query or reply packet.
$query = new Net::DNS::Packet( $example, 'ANY' );
$reply = $resolver->send($query) or die;
($question) = $reply->question;
$name = $question->name;
qname, zname
$qname = $question->qname;
$zname = $question->zname;
Canonical ASCII domain name as required for the query subject transmitted to a nameserver. In dynamic update packets, this attribute is
known as zname() and refers to the zone name.
qtype, ztype
$qtype = $question->qtype;
$ztype = $question->ztype;
Returns the question type attribute. In dynamic update packets, this attribute is known as ztype() and refers to the zone type.
qclass, zclass
$qclass = $question->qclass;
$zclass = $question->zclass;
Returns the question class attribute. In dynamic update packets, this attribute is known as zclass() and refers to the zone class.
print
$object->print;
Prints the record to the standard output. Calls the string() method to get the string representation.
string
print "string = ", $question->string, "
";
Returns a string representation of the question record.
COPYRIGHT
Copyright (c)1997-2002 Michael Fuhr.
Portions Copyright (c)2002-2004 Chris Reinhardt.
Portions Copyright (c)2003,2006-2011 Dick Franks.
All rights reserved.
This program is free software; you may redistribute it and/or modify it under the same terms as Perl itself.
SEE ALSO
perl, Net::DNS, Net::DNS::DomainName, Net::DNS::Packet, RFC 1035 Section 4.1.2
perl v5.18.2 2014-01-16 Net::DNS::Question(3)