登录  
 加关注
查看详情
   显示下一条  |  关闭
温馨提示!由于新浪微博认证机制调整,您的新浪微博帐号绑定已过期,请重新绑定!立即重新绑定新浪微博》  |  关闭

SeaRiver Blog

实力才是你一生最好的依靠!

 
 
 

日志

 
 

iptables整休模块链表结构图  

2009-11-24 12:40:40|  分类: iptables |  标签: |举报 |字号 订阅

  下载LOFTER 我的照片书  |
Network
                    -----------+-----------
                               |
                     +---------+---------+
                     |     PREROUTING    |
                     | +-------+-------+ |
                     | |   conntrack   | |
                     | +-------+-------+ |
                     | |    mangle     | | <- MARK WRITE 
                     | +-------+-------+ |
                     | |      IMQ      | |
                     | +-------+-------+ |
                     | |      nat      | | <- DEST REWRITE
                     | +-------+-------+ |     DNAT or REDIRECT
                     +---------+---------+
                               |
                      
+-------+-------+
                       |    ipchains   |
                       |     input     |
                       +-------+-------+

                               |
                       +-------+-------+
                       |      QOS      |
                       |    INGRESS    |
                       +-------+-------+
                               |
         packet is for +-------+-------+ packet is for
          this machine |     INPUT     | another address
        +--------------+    ROUTING    +--------------+
        |              |    + PDBB     |              |
        |              +---------------+              |
+-------+-------+                                     |
|     INPUT     |                                     |
| +-----+-----+ |                                     |
| |   filter  | |                                     |
| +-----+-----+ |                                     |
+-------+-------+                                     |
        |                                             |
+-------+-------+                                     |
|     Local     |                             +-------+-------+
|    Process    |                             |    FORWARD    |
+-------+-------+                             | +-----+-----+ |
        |                                     | |  mangle   | | <- MARK WRITE
+-------+-------+                             | +-----+-----+ |
|    OUTPUT     |                             | |  filter   | |
|    ROUTING    |                             | +-----+-----+ |
+-------+-------+                             +-------+-------+
        |                                             |
+-------+-------+                                     |
|     OUTPUT    |                             +-------+-------+
| +-----------+ |                             |    ipchains   |
| | conntrack | |                             |    forward    |
| +-----+-----+ |                             +-------+-------+
| |   mangle  | | <- MARK WRITE                       |
| +-----+-----+ |                                     |
| |    nat    | | <-DEST REWRITE                      |
| +-----+-----+ |     DNAT or REDIRECT                |
| |   filter  | |                                     |
| +-----+-----+ |                                     |
+-------+-------+                                     |
        |                                             |
        +------------------+       +------------------+
                           |       |
                        +--+-------+--+
                        |   ipchains  |
                        |    output   |
                        +------+------+
                               |
                     +---------+---------+
                     |    POSTROUTING    |
                     | +-------+-------+ |
                     | |    mangle     | | <- MARK WRITE
                     | +-------+-------+ |
                     | |      nat      | | <-SOURCE REWRITE
                     | +-------+-------+ |     SNAT or MASQUERADE
                     | |   conntrack   | |
                     | +-------+-------+ |
                     | |      IMQ      | |
                     | +-------+-------+ |
                     +---------+---------+
                               |
                        +------+------+
                        |     QOS     |
                        |    EGRESS   |
                        +------+------+
                               |
                    -----------+-----------
                            Network

  评论这张
 
阅读(783)| 评论(0)

历史上的今天

评论

<#--最新日志,群博日志--> <#--推荐日志--> <#--引用记录--> <#--博主推荐--> <#--随机阅读--> <#--首页推荐--> <#--历史上的今天--> <#--被推荐日志--> <#--上一篇,下一篇--> <#-- 热度 --> <#-- 网易新闻广告 --> <#--右边模块结构--> <#--评论模块结构--> <#--引用模块结构--> <#--博主发起的投票-->
 
 
 
 
 
 
 
 
 
 
 
 
 
 

页脚

网易公司版权所有 ©1997-2018