From: James Rhett Aultman <jaultman@cise.ufl.edu>
To: Georgi Alexandrov <georgi.alexandrov@gmail.com>,
netfilter@lists.netfilter.org
Subject: Re: running commands when packet matched
Date: Mon, 05 Dec 2005 12:48:18 -0500 [thread overview]
Message-ID: <43947D62.40407@cise.ufl.edu> (raw)
In-Reply-To: <4394784C.8030800@gmail.com>
Georgi Alexandrov wrote:
> Danger Will Robinson: Conventional wisdom says that auto-blocking is
> inherently dangerous."
Actually, for what I'm trying to do, switching to userspace is probably
not that dangerous. The reason is because I am trying to match one
packet, then the rule for the matching is actually switched off. In
other words, I want to match a single packet, run some user code, then
remove the rule for matching that packet. Given this, I can't see how
the scenario you've laid out would be that big of a threat.
--
Rhett.
prev parent reply other threads:[~2005-12-05 17:48 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-12-03 22:39 running commands when packet matched James Rhett Aultman
2005-12-04 0:11 ` Eric Leblond
2005-12-05 17:26 ` Georgi Alexandrov
2005-12-05 17:48 ` James Rhett Aultman [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=43947D62.40407@cise.ufl.edu \
--to=jaultman@cise.ufl.edu \
--cc=georgi.alexandrov@gmail.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.