dynamically update iptables with module ?

dynamically update iptables with module ?

[Calvin]

[-- Attachment #1: Type: text/plain, Size: 505 bytes --]

Dear all,

I am a newbies in netfilter, just a question in my mind, would it be possible to dynamically changing the 
iptables from a module? For example, if i see a paticular message from a pc, then I update the iptable to allow outgoing communication frmo that pc.  Or there is some other way to achieve 

Is it possible to do it?

Or... is it possible that the iptables can be updated by a C++/C programe by executing a shell script to update the iptables?

Thanks for any advices.

Calvin

[-- Attachment #2: Type: text/html, Size: 1321 bytes --]

Re: dynamically update iptables with module ?

[Stephen Frost]

[-- Attachment #1: Type: text/plain, Size: 707 bytes --]

* Calvin (calvinproject@ihug.com.au) wrote:
> I am a newbies in netfilter, just a question in my mind, would it be possible to dynamically changing the 
> iptables from a module? For example, if i see a paticular message from a pc, then I update the iptable to allow outgoing communication frmo that pc.  Or there is some other way to achieve 
> 
> Is it possible to do it?

You should be able to do this with iptables and the ipt_recent module,
assuming the 'message' can be matched using other iptables modules/rules.

> Or... is it possible that the iptables can be updated by a C++/C programe by executing a shell script to update the iptables?

That can probably be done too...

	Stephen

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: dynamically update iptables with module ?

[P.Italiaander]

yes it's possible, maybe this link will help.

http://www.gentoo.org/proj/en/dynfw.xml

Pascal

>Op woensdag 14 mei 2003 00:43, schreef Calvin:
> Dear all,
>
> I am a newbies in netfilter, just a question in my mind, would it be
> possible to dynamically changing the iptables from a module? For example,
> if i see a paticular message from a pc, then I update the iptable to allow
> outgoing communication frmo that pc.  Or there is some other way to achieve
>
> Is it possible to do it?
>
> Or... is it possible that the iptables can be updated by a C++/C programe
> by executing a shell script to update the iptables?
>
> Thanks for any advices.
>
> Calvin