I have a dumb question. If you have traffic that is being NAT'ed or masqueraded, does the incoming traffic classify under forward or input in the firewall.
I assume since its dst. address is an address on the router that it would be input but then it is actually being forwarded to another packet. So I'm confused.
Just looking for clarity. Thanks.
Re: NAT firewall Chain Input or Forward?
It's classified as Input, unless there is already an associated entry in ip tracking or NAT; Then it's forwarding.
Last edited by lordkappa on Tue Oct 07, 2014 12:28 am, edited 1 time in total.
Re: NAT firewall Chain Input or Forward?
If the destination address after NAT is not the router address it is processed in the FORWARD chain.
Otherwise it would be processed in the INPUT chain.
Sent from my LG-D800 using Tapatalk
Otherwise it would be processed in the INPUT chain.
Sent from my LG-D800 using Tapatalk