* stat module
@ 2003-11-11 10:49 Juha Heljoranta
2003-11-11 12:27 ` Patrick McHardy
0 siblings, 1 reply; 2+ messages in thread
From: Juha Heljoranta @ 2003-11-11 10:49 UTC (permalink / raw)
To: netfilter-devel
Hi,
I was thinking about to write a module to match outbound packets against
stat (file of filesystem status) information. One might find device and
inode information usefull.
Usage might be something like
$ iptables -A OUTPUT -m stat --device 303 --inode 341166 -j ACCEPT
Anyway, I thought to ask if you have any suggestions, thoughts,
opinions, etc. about this. I might find them helpfull :)
I have about 400 hours to spend on this. So how does it sound?
Regards,
Juha Heljoranta
email: juha.heljoranta at evitech.fi
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: stat module
2003-11-11 10:49 stat module Juha Heljoranta
@ 2003-11-11 12:27 ` Patrick McHardy
0 siblings, 0 replies; 2+ messages in thread
From: Patrick McHardy @ 2003-11-11 12:27 UTC (permalink / raw)
To: Juha Heljoranta; +Cc: netfilter-devel
Juha Heljoranta wrote:
>Hi,
>
>I was thinking about to write a module to match outbound packets against
>stat (file of filesystem status) information. One might find device and
>inode information usefull.
>
>Usage might be something like
>$ iptables -A OUTPUT -m stat --device 303 --inode 341166 -j ACCEPT
>
>Anyway, I thought to ask if you have any suggestions, thoughts,
>opinions, etc. about this. I might find them helpfull :)
>
>
Not sure what you want to match here, is it the inode of the
executable that created the packet ? If so, have a look at
the owner match.
>I have about 400 hours to spend on this. So how does it sound?
>
>
I wish I had 400 hours .. ;)
Best regards,
Patrick
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2003-11-11 12:27 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2003-11-11 10:49 stat module Juha Heljoranta
2003-11-11 12:27 ` Patrick McHardy
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.