Front Page
Interesting information
Routing and IPTables
From this documentation and hands-on testing, I follow, that:
- Connection tracking is attached mainly before the mangle-table PREROUTING stage to the
NF_IP_PREROUTING hook
- reverse NAT (esp. reverse mapping of masqueraed connections) happens after the mangle and nat tables have been traversed but before routing (also at the
NF_IP_PREROUTING hook)
- rp_filter is part of the routing decision and is applied directly before ordinary routing
Getting information out of binary debian packages
Of course, this can be done with the UNIX tools (ar, tar etc) but there is a cononical debian way. To extract the control file information, us
$ dpkg-deb -I <package>.deb
and to get a listing of the file contents:
$ dpkg-deb -c <package>.deb
