I have two iptable rules for userspace modification :
iptable -t mangle -A PREROUTING -p udp --dport 9090 -j NFQUEUE iptable -t mangle -A OUTPUT -p udp --sport 9090 -j NFQUEUE I have the following network setup: client ---------------->Linux Box or router---------------------> So the rules i need will work like this: If packet comes from client to port 9090 i will modify it. Now the router opens symmetric port when it communicates with the server. That means it opens 9090 port when it communicates with the server and hence get modified by the second rule(--sport 9090). I want to avoid this. The rules will be like this: 1.If packet comes from a specific ip block i will accept it. then i will queue the remaining packets based on the destination port it comes to. 2.If packet goes to a specific ip block i will forward it. I will queue the remaining packets based on the source port information. Thanks in advance. With Best Regards Ariful Hossain Tuhin email: 1. etothepowerpi@gmail.com 2. etothepowerpi@hotmail.com 3.etothepowerpi@yahoo.com skype: freeburn1986 |