Re: [Nufw-users] NuFW and NAT/Route

[Vincent Deffontaines]

Lockenvitz Jan EXT a écrit :
> Hi,
>
> it's me again ;-)
>
> Is NuFW able to add NAT rules for each user to the FW ?
>
> Is NuFW able to handle handle other targets than ACCEPT and DROP,
> especially ROUTE?
>
> I need it one of them for my roadworriers to get the routing OK
>
> Thanx,
> Jan

Hmmm, quick answer is no.
NuFW is about IP filtering, hence only is concerned with the Netfilter's
"filter" table.

The libipq allows only for two possible decisions : ACCEPT or DROP. It is
not possible to have nufw send any other information, routing decision,
nat rule or anything back to the kernel.

This is a kernel limitation, not one of NuFW.

Usually, the NAT rule of a firewall contains only very few, fixed rules ;
I'm not sure I understand what you're trying to do.

By the way, NuFW and QUEUE stuff are only about the gateway. NuFW has
absolutely nothing to do with routing decisions or filter rules on the
clients machines. The nutcpc (and other client programs) are 100%
userspace application, which [very] basically act based on what "netstat"
shows.

Vincent