Processing order

• Incoming processing order:

  • NAT/RDR first. In this phase, destination addresses are changed
  • IP accounting
  • Check authentication. If match, goto 7
  • Fragment cache, if match goto 7
  • State cache, if match goto 7
  • Rule matching
  • If fastroute: route the packet (no output processing)
  • If pass goto further kernel processing, otherwise discard packet

Notes: