Next Previous Contents

---

Linux netfilter Hacking HOWTO

Rusty Russell and Harald Welte, mailing list netfilter@lists.samba.org

$Revision: 521 $ $Date: 2002-07-02 06:07:19 +0200 (mar, 02 jul 2002) $

---

This document describes the netfilter architecture for Linux, how to hack it, and some of the major systems which sit on top of it, such as packet filtering, connection tracking and Network Address Translation.

---

 

1. Introduction

• 1.1 What is netfilter?
• 1.2 What's wrong with what we had in 2.0 and 2.2?
• 1.3 Who are you?
• 1.4 Why does it crash?

 

2. Where Can I Get The Latest?

 

3. Netfilter Architecture

• 3.1 Netfilter Base
• 3.2 Packet Selection: IP Tables
• 3.3 Connection Tracking
• 3.4 Other Additions

 

4. Information for Programmers

• 4.1 Understanding ip_tables
• 4.2 Extending iptables
• 4.3 Understanding NAT
• 4.4 Extending Connection Tracking/NAT
• 4.5 Understanding Netfilter
• 4.6 Writing New Netfilter Modules
• 4.7 Packet Handling in Userspace

 

5. Translating 2.0 and 2.2 Packet Filter Modules

 

6. Netfilter Hooks for Tunnel Writers

 

7. The Test Suite

• 7.1 Writing a Test
• 7.2 Variables And Environment
• 7.3 Useful Tools
• 7.4 Random Advice

 

8. Motivation

 

9. Thanks

---

Next Previous Contents