Is DNSFILTER iptables Chain Called From PREROUTING Chain?

[HarryMuscle]

I'm trying to determine why it's supposed to not be possible to redirect DNS traffic via the iptables DNSFILTER chain to a loopback address and the only thing I can think of is that apparently using loopback addresses in the PREROUTING chain is not allowed. What I haven't been able to confirm though is if the iptable rules in the DNSFILTER chain get called from the PREROUTING chain or the OUTPUT chain. Anyone know?

Thanks,
Harry

 

[dave14305]

What I haven't been able to confirm though is if the iptable rules in the DNSFILTER chain get called from the PREROUTING chain or the OUTPUT chain. Anyone know?

iptables -t nat -nvL