Re: Is libiptc still the preferred library for manipulating tables?

[Pablo Neira Ayuso <pablo@netfilter.org>]

Warren Kenny wrote:
> This subject seems a bit hazy to me at the moment. Basically I'm
> writing a network intrusion detection and prevention system for Linux
> and I'd like to be able to use Netfilter to block packets coming from
> nodes which have been identified as malicious. I'd prefer to avoid the
> use of libnetfilter_queue since I'm already using libpcap for packet
> analysis and it has some extras that I rely on. Basically I want to
> add new tables and rules from within my application in order to filter
> out malicious traffic.
> 
> There seem to be a lot of different guides on how to do this, most of
> which are obsolete, including the guide on libiptc. I need to know the
> latest and best way to manipulate iptables rules.

Unfortunately, libiptc is not a supported as a standalone library, it is 
just a directory inside iptables. The only interface available, at the 
moment, is iptables, the command line tool. You can blame us for not 
providing an appropiate library interface yet.

-- 
The dawn of the fourth age of Linux firewalling is coming; a time of 
great struggle and heroic deeds -- J.Kadlecsik got inspired by J.Morris