Re: [NEW EXTENSION] Condition Match

[Stephane Ouellette <ouellettes@videotron.ca>]

allen wrote:

>On Tuesday 29 October 2002 12:54 pm, Stephane Ouellette wrote:
>  
>
>>   I developped last week a new extension to Netfilter in order to
>>enable or disable a set of rules using /proc files.
>>    
>>
>
>
>Yeah, as others have said, the idea is definitely cool.
>
>I hate to admit that I might use it this way.  God help me...
>
>I'm having visions of debugging impossibly complex
>booboo's, and chasing after phantom problems that
>appear and disappear and not remembering that
>I or someone had done or could have done this.
>
>Can you think of a way to implement far greater
>"manageability"
>
>?
>

   I'm not sure to understand your question...   :-(

>
>Or what are your thoughts about that ?
>
>Maybe it is a "user-be-ware" thing best left to
>some odd application to keep track of.
>
>Hmn...
>
>But... the "rules" would appear though... right ?
>
>With an "iptables -L" ?
>  
>

   The rules appear with "iptables -L"  such as :

0   0   ACCEPT      udp    ---    *    *     0.0.0.0/0   0.0.0.0/0   
 condition quake udp dpt:27960

>And current "state" ?
>

   No, the current state is only available if you read the /proc file.

>-AEF
>
>  
>