(no subject)

(no subject)

[sanoj mg]

[-- Attachment #1: Type: text/plain, Size: 302 bytes --]

hello,          I am looking for a netfilter filter project to work with( of about 5 month duration).I would be very buch obliged if any of you give  any ideas/directions on this. sanoj.





---------------------------------
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more

[-- Attachment #2: Type: text/html, Size: 512 bytes --]

Re: (no subject)

[Fabrice MARIE]

Hello,

On Monday 14 April 2003 13:37, sanoj mg wrote:
> hello,          I am looking for a netfilter filter project to work with(
> of about 5 month duration).I would be very buch obliged if any of you give 
> any ideas/directions on this. sanoj.

http://www.netfilter.org/documentation/HOWTO/netfilter-hacking-HOWTO.html

Have a nice day,

Fabrice.
--
Fabrice MARIE

"Silly hacker, root is for administrators"
       -Unknown

netfilter language

[Scott MacKay]

Hello,
    I have been playing with the userspace component
of iptables, making my own QUEUE application, with
varying levels of success (as seen in previous
emails).  Because of my needs which I don't think can
be fulfilled in a QUEUE, I am thinking of looking into
working more in the kernel level netfilter.  
    I was wondering, can C++ be used in developing
netfilter modules, or is it really limited more to C? 
The material I would shift into a netfilter area is
pretty simple, so I can easily convert it to C if
needed.  Also, are there any references to the order
in which my work would be called?  Because of it's
nature, I would need to be called before any other
handler module (especially conn track).  Thanks in
advance!

-Scott

__________________________________________________
Do you Yahoo!?
The New Yahoo! Search - Faster. Easier. Bingo
http://search.yahoo.com

Re: netfilter language

[Patrick Schaaf]

>     I was wondering, can C++ be used in developing
> netfilter modules, or is it really limited more to C? 

ANY kernel development is limited to C - Gnu gcc, to be exact.

> Also, are there any references to the order
> in which my work would be called?

See the definition of 'enum nf_ip_hook_priorities' in the file
include/linux/netfilter_ipv4.h. These go into the 'priority' field
of the 'struct nf_hook_ops' (declaration in include/linux/netfilter.h).

You define such a 'struct nf_hook_ops', and pass it to nf_register_hook(),
in your module initialization code.

> Because of it's nature, I would need to be called before any other
> handler module (especially conn track).

Just use a priority numerically lower than -200 (NF_IP_PRI_CONNTRACK).

best regards
  Patrick