mirror of
https://gitlab.com/shorewall/code.git
synced 2025-06-27 05:01:37 +02:00
Update Netfilter overview with Raw and Rawpost tables
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
705744fd8c
commit
61d4363865
@ -77,13 +77,31 @@
|
|||||||
shaping.</para>
|
shaping.</para>
|
||||||
</listitem>
|
</listitem>
|
||||||
</varlistentry>
|
</varlistentry>
|
||||||
|
|
||||||
|
<varlistentry>
|
||||||
|
<term>Raw</term>
|
||||||
|
|
||||||
|
<listitem>
|
||||||
|
<para>Used primarily for creating exemptions from connection
|
||||||
|
tracking with the NOTRACK target. Also used for stateless
|
||||||
|
DNAT.</para>
|
||||||
|
</listitem>
|
||||||
|
</varlistentry>
|
||||||
|
|
||||||
|
<varlistentry>
|
||||||
|
<term>Rawpost</term>
|
||||||
|
|
||||||
|
<listitem>
|
||||||
|
<para>Used for stateless SNAT.</para>
|
||||||
|
</listitem>
|
||||||
|
</varlistentry>
|
||||||
</variablelist>
|
</variablelist>
|
||||||
|
|
||||||
<para>The following diagram shows how packets traverse the various builtin
|
<para>The following diagram shows how packets traverse the various builtin
|
||||||
chains within Netfilter. Note that not all table/chain combinations are
|
chains within Netfilter. Note that not all table/chain combinations are
|
||||||
used.</para>
|
used.</para>
|
||||||
|
|
||||||
<graphic align="center" fileref="images/Netfilter.png" />
|
<graphic align="center" fileref="images/Netfilter.png"/>
|
||||||
|
|
||||||
<para><quote>Local Process</quote> means a process running on the
|
<para><quote>Local Process</quote> means a process running on the
|
||||||
Shorewall system itself.</para>
|
Shorewall system itself.</para>
|
||||||
@ -95,7 +113,7 @@
|
|||||||
|
|
||||||
<para>In the above diagram are boxes similar to this:</para>
|
<para>In the above diagram are boxes similar to this:</para>
|
||||||
|
|
||||||
<graphic fileref="images/Legend.png" />
|
<graphic fileref="images/Legend.png"/>
|
||||||
|
|
||||||
<para>The above box gives the name of the built-in chain (<emphasis
|
<para>The above box gives the name of the built-in chain (<emphasis
|
||||||
role="bold">INPUT</emphasis>) along with the names of the tables
|
role="bold">INPUT</emphasis>) along with the names of the tables
|
||||||
|
Binary file not shown.
Before Width: | Height: | Size: 19 KiB After Width: | Height: | Size: 29 KiB |
File diff suppressed because one or more lines are too long
Loading…
x
Reference in New Issue
Block a user