Re: xt_request_find_match

[Patrick McHardy <kaber@trash.net>]

Jan Engelhardt wrote:
> On Dec 20 2006 10:17, Patrick McHardy wrote:
> 
>>Jan Engelhardt wrote:
>>
>>>>Make sure the user specifies the match on the command line before
>>>>your match. Look at the TCPMSS or REJECT targets for examples for
>>>>this.
>>>
>>>That would mean I'd have to
>>>
>>>  -p tcp -m multiport --dport 1,2,3,4 -m time --time sundays -m 
>>>lotsofothers -j TARGET
>>>  -p udp -m multiport --dport 1,2,3,4 -m time --time sundays -m 
>>>lotsofothers -j TARGET
>>
>>I don't see any match that would depend on an other match in
>>your example. How about your start explaining what you would
>>like to do, ideally with some code.
> 
> 
> Yup, on the spot!
> http://jengelh.hopto.org/f/chaostables/chaostables-0.1.tar.bz2
> (Contains a target, but still something that could use 
> xt_request_find_module.)

That looks a bit silly, you combine matches and targets through
code instead of through the ruleset.

        /* Equivalent to
            -A chaos -m random --average 1 -j REJECT --reject-with
host-unreach
            -A chaos -p tcp -j TARPIT
            -A chaos -j DROP
        */

Just do that ..