Where does netfilter nat reverse mangling take place?

Hi,

when I do SNAT, this is done in nat/POSTROUTING. But where will the
reply packet be reverse-mangled?

Regards, André

Hello,

André Hänsel a écrit :
>
> when I do SNAT, this is done in nat/POSTROUTING. But where will the
> reply packet be reverse-mangled?

In the NF_IP_PRE_ROUTING Netfilter hook at the same place as where the
nat/PREROUTING chain is called, after mangle/PREROUTING and before the
input routing decision. At least for an external connection ; things are
less clear when the connection is local to the host through the loopback
interface.