Update Netfilter overview with Raw and Rawpost tables

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2012-06-10 15:30:39 -07:00
parent 705744fd8c
commit 61d4363865
3 changed files with 349 additions and 330 deletions

View File

@ -77,13 +77,31 @@
shaping.</para>
</listitem>
</varlistentry>
<varlistentry>
<term>Raw</term>
<listitem>
<para>Used primarily for creating exemptions from connection
tracking with the NOTRACK target. Also used for stateless
DNAT.</para>
</listitem>
</varlistentry>
<varlistentry>
<term>Rawpost</term>
<listitem>
<para>Used for stateless SNAT.</para>
</listitem>
</varlistentry>
</variablelist>
<para>The following diagram shows how packets traverse the various builtin
chains within Netfilter. Note that not all table/chain combinations are
used.</para>
<graphic align="center" fileref="images/Netfilter.png" />
<graphic align="center" fileref="images/Netfilter.png"/>
<para><quote>Local Process</quote> means a process running on the
Shorewall system itself.</para>
@ -95,7 +113,7 @@
<para>In the above diagram are boxes similar to this:</para>
<graphic fileref="images/Legend.png" />
<graphic fileref="images/Legend.png"/>
<para>The above box gives the name of the built-in chain (<emphasis
role="bold">INPUT</emphasis>) along with the names of the tables

Binary file not shown.

Before

Width:  |  Height:  |  Size: 19 KiB

After

Width:  |  Height:  |  Size: 29 KiB

File diff suppressed because one or more lines are too long