IPTables and matching packets.

Deleriux · 01-26-2008, 03:35 PM

I'm setting up a traffic shaper using "tc" and the CLASSIFY target in iptables.

Now, as far as i've always figured, with iptables when a packet in a chain matches, the traversal of the chain for that packet stops.

Is this right?

Because it seems that using CLASSIFY is a lot like using LOG.

Can anyone mention for definite whether or not a matching rule stops the chain traversal - or - if traversal continues?

Or does it all differ per table (the mangle table is used for classifying packets).

SonJelfn · 05-28-2008, 06:08 PM

According to the netfilter mailing list, the targets have different reactions depending on the actual target and table on which the target can operate.

In the case of the mangle table, all targets are made to be non-terminating. In other words the packet will transverse the whole mangle table chain before returning to the next chain.

Well, I hope that helps.

Good luck.