I have attached a diagram which was posted a while back on the path of packets through the kernel
might help On Wed, Feb 13, 2008 at 07:50:12PM +1000, Adrian Levi wrote: > On 13/02/2008, Zach <[EMAIL PROTECTED]> wrote: > > On Feb 12, 2008 7:20 PM, Adrian Levi <[EMAIL PROTECTED]> wrote: > > > > > > The topology of chains to tables is fundamentally different, In chains > > > a packet that is to be forwarded must also go though the input and > > > output chains. Under tables this packet only has to traverse the > > > forward table, input and output tables only refer to packets destined > > > for and from the firewall machine. > > > > Hi Adrian, > > > > Ah I see so we're dealing with apples and oranges here. [snip] > > Adrian > > -- > 24x7x365 != 24x7x52 Stupid or bad maths? > <erno> hm. I've lost a machine.. literally _lost_. it responds to > ping, it works completely, I just can't figure out where in my > apartment it is. -- Software suppliers are trying to make their software packages more "user-friendly". ... Their best approach, so far, has been to take all the old brochures, and stamp the words, "user-friendly" on the cover. -- Bill Gates, Microsoft, Inc. [Pot. Kettle. Black.]
<<attachment: IPTables.png>>
signature.asc
Description: Digital signature