* Netfilter as an application.
@ 2004-01-16 16:39 kernel_learner
2004-01-16 16:55 ` [despammed] " Andreas Kretschmer
0 siblings, 1 reply; 6+ messages in thread
From: kernel_learner @ 2004-01-16 16:39 UTC (permalink / raw)
To: netfilter
Dear All,
How's it going! I am looking for something that I am
not sure currently exists. Basically I want to make a
version of netfilter that's free from all the
kernel-level and networking stack hooks. I am looking
for a plain simpler version of netfilter which does
not interact with the kernel or the networking stack
in any way. It would be a standard user program which
a person with normal privelges could compile and run.
What would it do? It could do the same things that
netfilter does...i.e. filter packets/NAT etc. However
the input could be driven from a "main" function which
"fakes" packets arriving on the network (this could be
driven from a trace).
Does such a thing exist?
How easy/difficult would it be to hack into the
current netfilter code to remove all the
networking/kernel hooks it has?
Could someone guide me as to how exactly to go about
doing this? i.e. where the hooks are..in the code?
I was also looking for documentation on the code...I
mean is there a documentation that explains the
software architecture?
Sorry for too many questions! :|
Cheers!
KeRNEL_LeaRNER
"Metallica- The mother of all ye metal bands."
__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [despammed] Netfilter as an application.
2004-01-16 16:39 Netfilter as an application kernel_learner
@ 2004-01-16 16:55 ` Andreas Kretschmer
2004-01-17 20:31 ` Rakotomandimby Mihamina
0 siblings, 1 reply; 6+ messages in thread
From: Andreas Kretschmer @ 2004-01-16 16:55 UTC (permalink / raw)
To: netfilter
am Fri, dem 16.01.2004, um 8:39:06 -0800 mailte kernel_learner folgendes:
> How's it going! I am looking for something that I am
> not sure currently exists. Basically I want to make a
> version of netfilter that's free from all the
> kernel-level and networking stack hooks. I am looking
> for a plain simpler version of netfilter which does
> not interact with the kernel or the networking stack
> in any way. It would be a standard user program which
> a person with normal privelges could compile and run.
Very bad. Every can modify the rules. I think, you search 'Zonealarm for
Linux'.
> What would it do? It could do the same things that
> netfilter does...i.e. filter packets/NAT etc. However
Why?
> Does such a thing exist?
I hope: no.
>
> How easy/difficult would it be to hack into the
> current netfilter code to remove all the
> networking/kernel hooks it has?
This is not the intention of netfilter.
Andreas
--
Diese Message wurde erstellt mit freundlicher Unterstützung eines freilau-
fenden Pinguins aus artgerechter Freilandhaltung. Er ist garantiert frei
von Micro$oft'schen Viren. (#97922 http://counter.li.org) GPG 7F4584DA
Was, Sie wissen nicht, wo Kaufbach ist? Hier: N 51.05082°, E 13.56889° ;-)
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [despammed] Netfilter as an application.
2004-01-16 16:55 ` [despammed] " Andreas Kretschmer
@ 2004-01-17 20:31 ` Rakotomandimby Mihamina
2004-01-18 20:55 ` AW: " misiu_
0 siblings, 1 reply; 6+ messages in thread
From: Rakotomandimby Mihamina @ 2004-01-17 20:31 UTC (permalink / raw)
To: netfilter
On Friday 16 January 2004 17:55, Andreas Kretschmer wrote:
> > It would be a standard user program which
> > a person with normal privelges could compile and run.
> Very bad. Every can modify the rules. I think, you search 'Zonealarm for
> Linux'.
Iptables is already simple to use . there is also shorewall that can make the
use easier ( for some )
Just think what would be the weird if any user can add the firewall rule on a
box . Do you really think something will work ?
> > What would it do? It could do the same things that
> > netfilter does...i.e. filter packets/NAT etc. However
> Why?
I think you should contribute to netfilter's documentation and give some
simple and explained rules examples , you'll see that iptables will be simple
ti use ... :-)
> > Does such a thing exist?
>
> I hope: no.
the same to me .
--
Rakotomandimby Mihamina Andrianifaharana
Tel : +33 2 38 76 43 65
http://stko.dyndns.info/site_principal/Members/mihamina
^ permalink raw reply [flat|nested] 6+ messages in thread
* AW: [despammed] Netfilter as an application.
2004-01-17 20:31 ` Rakotomandimby Mihamina
@ 2004-01-18 20:55 ` misiu_
2004-01-19 23:51 ` Ted Kaczmarek
2004-01-22 16:33 ` kernel_learner
0 siblings, 2 replies; 6+ messages in thread
From: misiu_ @ 2004-01-18 20:55 UTC (permalink / raw)
To: netfilter
Hi,
you can use fwbuilder and sudo...
so a normal user can use tables
or did i miss something?
-----Ursprüngliche Nachricht-----
Von: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org]Im Auftrag von
Rakotomandimby Mihamina
Gesendet: Samstag, 17. Januar 2004 21:32
An: netfilter@lists.netfilter.org
Betreff: Re: [despammed] Netfilter as an application.
On Friday 16 January 2004 17:55, Andreas Kretschmer wrote:
> > It would be a standard user program which
> > a person with normal privelges could compile and run.
> Very bad. Every can modify the rules. I think, you search 'Zonealarm for
> Linux'.
Iptables is already simple to use . there is also shorewall that can make
the
use easier ( for some )
Just think what would be the weird if any user can add the firewall rule on
a
box . Do you really think something will work ?
> > What would it do? It could do the same things that
> > netfilter does...i.e. filter packets/NAT etc. However
> Why?
I think you should contribute to netfilter's documentation and give some
simple and explained rules examples , you'll see that iptables will be
simple
ti use ... :-)
> > Does such a thing exist?
>
> I hope: no.
the same to me .
--
Rakotomandimby Mihamina Andrianifaharana
Tel : +33 2 38 76 43 65
http://stko.dyndns.info/site_principal/Members/mihamina
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: AW: [despammed] Netfilter as an application.
2004-01-18 20:55 ` AW: " misiu_
@ 2004-01-19 23:51 ` Ted Kaczmarek
2004-01-22 16:33 ` kernel_learner
1 sibling, 0 replies; 6+ messages in thread
From: Ted Kaczmarek @ 2004-01-19 23:51 UTC (permalink / raw)
To: misiu_; +Cc: netfilter
sudo firewall capabilities, what a concept. Do yourself a favour, don't
post to mailing list's from the same domain as your sudo accessible
firewalls.
Ted
On Sun, 2004-01-18 at 15:55, misiu_@gmx.de wrote:
> Hi,
>
> you can use fwbuilder and sudo...
> so a normal user can use tables
> or did i miss something?
>
>
> -----Ursprüngliche Nachricht-----
> Von: netfilter-admin@lists.netfilter.org
> [mailto:netfilter-admin@lists.netfilter.org]Im Auftrag von
> Rakotomandimby Mihamina
> Gesendet: Samstag, 17. Januar 2004 21:32
> An: netfilter@lists.netfilter.org
> Betreff: Re: [despammed] Netfilter as an application.
>
>
> On Friday 16 January 2004 17:55, Andreas Kretschmer wrote:
> > > It would be a standard user program which
> > > a person with normal privelges could compile and run.
> > Very bad. Every can modify the rules. I think, you search 'Zonealarm for
> > Linux'.
>
> Iptables is already simple to use . there is also shorewall that can make
> the
> use easier ( for some )
>
> Just think what would be the weird if any user can add the firewall rule on
> a
> box . Do you really think something will work ?
>
> > > What would it do? It could do the same things that
> > > netfilter does...i.e. filter packets/NAT etc. However
> > Why?
>
> I think you should contribute to netfilter's documentation and give some
> simple and explained rules examples , you'll see that iptables will be
> simple
> ti use ... :-)
>
> > > Does such a thing exist?
> >
> > I hope: no.
>
> the same to me .
>
>
> --
> Rakotomandimby Mihamina Andrianifaharana
> Tel : +33 2 38 76 43 65
> http://stko.dyndns.info/site_principal/Members/mihamina
>
>
>
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: AW: [despammed] Netfilter as an application.
2004-01-18 20:55 ` AW: " misiu_
2004-01-19 23:51 ` Ted Kaczmarek
@ 2004-01-22 16:33 ` kernel_learner
1 sibling, 0 replies; 6+ messages in thread
From: kernel_learner @ 2004-01-22 16:33 UTC (permalink / raw)
To: netfilter
Maybe I did say this in the wrong way..
No way I want a user to change the IPTABLE Rules..that
would be ..ahem..CRAZY!
Anyways what I really wanted was something that I can
use more like a benchmark which would read packet
inputs from a text-file....which was computationally
like the original netfilter..and would be free from
the networking stack and linux kernel hooks. This
would be a standalone benchmark that could be compiled
onto different architectures (embedded) for
performance metrics etc..
There..I hope I am clear now :|
Cheers
Learner!
--- misiu_@gmx.de wrote:
> Hi,
>
> you can use fwbuilder and sudo...
> so a normal user can use tables
> or did i miss something?
>
>
> -----Ursprüngliche Nachricht-----
> Von: netfilter-admin@lists.netfilter.org
> [mailto:netfilter-admin@lists.netfilter.org]Im
> Auftrag von
> Rakotomandimby Mihamina
> Gesendet: Samstag, 17. Januar 2004 21:32
> An: netfilter@lists.netfilter.org
> Betreff: Re: [despammed] Netfilter as an
> application.
>
>
> On Friday 16 January 2004 17:55, Andreas Kretschmer
> wrote:
> > > It would be a standard user program which
> > > a person with normal privelges could compile and
> run.
> > Very bad. Every can modify the rules. I think, you
> search 'Zonealarm for
> > Linux'.
>
> Iptables is already simple to use . there is also
> shorewall that can make
> the
> use easier ( for some )
>
> Just think what would be the weird if any user can
> add the firewall rule on
> a
> box . Do you really think something will work ?
>
> > > What would it do? It could do the same things
> that
> > > netfilter does...i.e. filter packets/NAT etc.
> However
> > Why?
>
> I think you should contribute to netfilter's
> documentation and give some
> simple and explained rules examples , you'll see
> that iptables will be
> simple
> ti use ... :-)
>
> > > Does such a thing exist?
> >
> > I hope: no.
>
> the same to me .
>
>
> --
> Rakotomandimby Mihamina Andrianifaharana
> Tel : +33 2 38 76 43 65
>
http://stko.dyndns.info/site_principal/Members/mihamina
>
>
>
__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free web site building tool. Try it!
http://webhosting.yahoo.com/ps/sb/
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2004-01-22 16:33 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-01-16 16:39 Netfilter as an application kernel_learner
2004-01-16 16:55 ` [despammed] " Andreas Kretschmer
2004-01-17 20:31 ` Rakotomandimby Mihamina
2004-01-18 20:55 ` AW: " misiu_
2004-01-19 23:51 ` Ted Kaczmarek
2004-01-22 16:33 ` kernel_learner
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox