Tag Info

New answers tagged


Got me! :-) I was wrong. What I thought about (the -m string match extension) is not possible, we are in the nat table and only first packet of the "connection" (even if udp) will pass through this table. So we cannot check all packets of same connection and deviate just one. You could check the match extension string (-m string). Note also that the DNAT ...


To match string in [acket content You can use "--string [!] string" if it compiled in Your kernel. But there no wildchar and I don't found way to use hex.


No; as you noted the packet passes from switch to switch unchanged, so the original FCS computed by the sending station does not need to be recomputed. It does however, have to be verified that it is correct and if not, the packet is discarded rather than forwarded.

Top 50 recent answers are included