[LARTC] Use l7-filter on router performing NAT?

[John Philips]

Hey guys,

Here's an easy one.

Is it possible to use the l7-filter extension on a box
that performs NAT?  The HOWTO says the filter only
works 100% of the time if it can see both sides of the
connection.  I tried putting the l7 MARK rules in the
POSTROUTING chain on a box that does NAT and it does
successfully mark some packets.  I'm not 100% sure if
it's working, or if it should work this way.

I've searched the mailing list archives and Google but
haven't found an answer.

Thanks!


 
____________________________________________________________________________________
Never miss an email again!
Yahoo! Toolbar alerts you the instant new Mail arrives.
http://tools.search.yahoo.com/toolbar/features/mail/