Re: Writing new Netfilter Modules

[Chris Lowth <chris@lowth.com>]

You could try "Rope", which allows modules to be written using a 
scripting language that doesnt required kernel development.
You get access to the vast majority of IP/UDP and TCP headers plus the 
data payload, conntrack, packet marks and other facilities.
Currently this is for kernel 2.4.x only - 2.6.x will be covered shortly.

Even if your eventual module isnt written in Rope, it does provide a way 
of playing with ideas (protyping) in a safe environment before 
committing them to C.

http://www.lowth.com/rope

Chris

Gingold Tomasz wrote:

>Hello,
>
>i want to write my own netfilter module. Can anybody tell me how to start?
>Are there any tutorials/documents which could help?
>
>Up to now i have found the "Linux netfilter Hacking HOWTO", especially
>chapter 4 "Information for Programmers.
>Is this the only help i can obtain?
>
>
>Another question: 
>I have found on www.netfilter.org <www.netfilter.org>  the following statement: 
>"netfilter and iptables are building blocks of a framework inside the Linux <http://www.kernel.org/>  2.4.x and 2.6.x kernel"
>Does this mean, that netfilter and iptables are part of the kernel and don´t have to be installed?
>
>thanks for helping
>gingold tomasz
>berlin
>  
>