https://www.henrydu.com/categories/network-coding/ Recent content in Network Coding on Henry Du Blog Hugo -- gohugo.io en-us Sat, 13 Jan 2024 00:00:00 +0000 https://www.henrydu.com/2024/01/13/netfilter-iptables-1/ Sat, 13 Jan 2024 00:00:00 +0000 https://www.henrydu.com/2024/01/13/netfilter-iptables-1/ Reading Notes: Netfilter and iptables Netfilter is firewalling subsystem in the Linux kernel as a modular[1]. For example, some fields are included in the sk_buf data structure only if the kernel is compiled with support for Netfilter feature. struct sk_buff is defined in linux/include/skbuff.h. There is a well defined document on the top of the file. It include the netfilter common header file #if IS_ENABLED(CONFIG_NF_CONNTRACK) #include <linux/netfilter/nf_conntrack_common.h>#endif Firewalling, essentially, hooks into certain places in the network stack code that packets always pass through when the packets or the kernel meet certain conditions.