Ii.SNAT: *SNAT is mainly used for changing the source address of packets. I.DNAT: *The DNAT target is mainly used to change the destination address of the packet and reroute it to the host. > The actual targets that do these kind of things are: Iii.POSTROUTING: is used to alter packets just as they are about to leave the firewall. Ii.OUTPUT : OUTPUT chain is used for altering locally generated packets (i.e., on the firewall) before they get to the routing decision. I.PREROUTING: is used to alter packets as soon as they get in to the firewall. After this, the rest of the packets will automatically have the same action taken on them as the first packet. > only first packet in a stream will hit this chain. > it should only be used to translate the packet’s source field or destination field. > This table should only be used for NAT (Network Address Translation) on different packets We could also do bandwidth limiting and Class Based Queuing based on these marks. *These marks could then be recognized by the iproute2 programs to do different routing on the packet depending on what mark they have, or if they don’t haveĪny. Iii.MARK: *The MARK target is used to set special mark values to the packet. *We could tell packets to only have a specific TTL and so on. Ii.TTL: *The TTL target is used to change the TTL. *This could be used for setting up policies on the network regarding how a packet should be routed and so on. I.TOS: *The TOS target is used to set and/or change the Type of Service field in the packet.
> Targets that are only valid in the mangle table: V.FORWARD: used to mangle packets after they have hit the first routing decision, but before they actually hit the last routing decision. Iv.INPUT: used to alter packets after they have been routed to the local computer itself, but before the user space application actually sees the data. Iii.OUTPUT: used for altering locally generated packets before they enter the routing decision. Ii.POSTROUTING : is used to mangle packets just after all routing decisions has been made. I.PREROUTING : PREROUTING is used for altering packets just as they enter the firewall and before they hit the routing decision. > table consists of five built in chains. > it is used to mangling packets (change the contents of different packets and that of their headers).
0 kommentar(er)
