From: "xlz" <xlz@netarchlab.tsinghua.edu.cn>
To: "linux-kernel" <linux-kernel@vger.kernel.org>,
"netfilter-devel" <netfilter-devel@lists.netfilter.org>
Subject: A problem of netfilter HOOK point
Date: Wed, 20 Dec 2006 17:13:56 +0800 [thread overview]
Message-ID: <200612201713511406550@netarchlab.tsinghua.edu.cn> (raw)
In-Reply-To: <200612201622446099344@netarchlab.tsinghua.edu.cn>
Hi,
I have a problem of the netfilter HOOK point. I load my handle function in HOOK point NF_IP6_LOCAL_OUT. But, its behavior is likely to be in the HOOK point NF_IP6_POST_ROUTING. The detail is shown as follows:
I configrue a 6to4 tunnel between two linux hosts (2.6 kernel) by adding a interface "6to4tun". The route table in one of the host is:
2002:c0a8:101::/48 dev 6to4tun
default via 3ffe:250:cccc::1 dev eth0
The 6to4 tunnel works well before I load my own handle function in the hook point NF_IP6_LOCAL_OUT.
In the hook point NF_IP6_LOCAL_OUT, my handle funtion changes the destination address of the packet from global ipv6 address (ex. 3ffe:250:cccd::2) to 6to4 address (ex. 2002:c0a8:101::1). In my expection, after changing the destination address in hook point NF_IP6_LOCAL_OUT, the host will look up the route table according the destination address, which is a 6to4 address. And then the host will send the packet from the interface "6to4tun". However, the experiment result is: the packets are sent from the interface eth0. It seems that the host looks up the route table according the global address. That means my own function seems to work in the hook point NF_IP6_POST_ROUTING.
What is the problem?
Thank you in advance for any help!
Lizhong Xie
2006-12-20
prev parent reply other threads:[~2006-12-20 9:14 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-12-20 8:22 xlz
2006-12-20 9:13 ` xlz [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200612201713511406550@netarchlab.tsinghua.edu.cn \
--to=xlz@netarchlab.tsinghua.edu.cn \
--cc=linux-kernel@vger.kernel.org \
--cc=netfilter-devel@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®