Next Previous Contents

Linux netfilter Hacking HOWTO

Rusty Russell, mailing list netfilter@lists.samba.org

$Revision: 1.10 $ $Date: 2001/05/04 20:58:43 $

This document describes the netfilter architecture for Linux, how to hack it, and some of the major systems which sit on top of it, such as packet filtering, connection tracking and Network Address Translation.

1. Introduction

• 1.1 What is netfilter?
• 1.2 What's wrong with what we had in 2.0 and 2.2?
• 1.3 Who are you?
• 1.4 Why does it crash?

2. Where Can I Get The Latest?

3. Netfilter Architecture

• 3.1 Netfilter Base
• 3.2 Packet Selection: IP Tables
• 3.3 Connection Tracking
• 3.4 Other Additions

4. Information for Programmers

• 4.1 Understanding ip_tables
• 4.2 Extending iptables
• 4.3 Understanding NAT
• 4.4 Extending Connection Tracking/NAT
• 4.5 Understanding Netfilter
• 4.6 Writing New Netfilter Modules
• 4.7 Packet Handling in Userspace

5. Translating 2.0 and 2.2 Packet Filter Modules

6. The Test Suite

• 6.1 Writing a Test
• 6.2 Variables And Environment
• 6.3 Useful Tools
• 6.4 Random Advice

7. Motivation

8. Thanks

Next Previous Contents