* libiptc or alternative
@ 2011-11-04 20:14 U.Mutlu
2011-11-07 1:02 ` Pablo Neira Ayuso
0 siblings, 1 reply; 5+ messages in thread
From: U.Mutlu @ 2011-11-04 20:14 UTC (permalink / raw)
To: netfilter
Hi,
in my userland-app I'm calling the iptables binary to add and
to remove iptables rules, but after moving to a Gigabit-Link
I need a faster method.
libiptc seems to fit the job but then it seems to be 'deprecated', is it really?
Is there a successor to it, or other alternatives?
Can I still use libiptc on a system where iptables v1.4.12 is installed?
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: libiptc or alternative
2011-11-04 20:14 libiptc or alternative U.Mutlu
@ 2011-11-07 1:02 ` Pablo Neira Ayuso
2011-11-07 1:03 ` Pablo Neira Ayuso
0 siblings, 1 reply; 5+ messages in thread
From: Pablo Neira Ayuso @ 2011-11-07 1:02 UTC (permalink / raw)
To: U.Mutlu; +Cc: netfilter
On Fri, Nov 04, 2011 at 09:14:13PM +0100, U.Mutlu wrote:
> Hi,
> in my userland-app I'm calling the iptables binary to add and
> to remove iptables rules, but after moving to a Gigabit-Link
> I need a faster method.
> libiptc seems to fit the job but then it seems to be 'deprecated', is it really?
> Is there a successor to it, or other alternatives?
> Can I still use libiptc on a system where iptables v1.4.12 is installed?
Pipe commands to iptables-save.
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: libiptc or alternative
2011-11-07 1:02 ` Pablo Neira Ayuso
@ 2011-11-07 1:03 ` Pablo Neira Ayuso
2011-11-07 2:09 ` U.Mutlu
0 siblings, 1 reply; 5+ messages in thread
From: Pablo Neira Ayuso @ 2011-11-07 1:03 UTC (permalink / raw)
To: U.Mutlu; +Cc: netfilter
On Mon, Nov 07, 2011 at 02:02:19AM +0100, Pablo Neira Ayuso wrote:
> On Fri, Nov 04, 2011 at 09:14:13PM +0100, U.Mutlu wrote:
> > Hi,
> > in my userland-app I'm calling the iptables binary to add and
> > to remove iptables rules, but after moving to a Gigabit-Link
> > I need a faster method.
> > libiptc seems to fit the job but then it seems to be 'deprecated', is it really?
> > Is there a successor to it, or other alternatives?
> > Can I still use libiptc on a system where iptables v1.4.12 is installed?
>
> Pipe commands to iptables-save.
Sorry, I meant to say iptables-restore, of course.
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: libiptc or alternative
2011-11-07 1:03 ` Pablo Neira Ayuso
@ 2011-11-07 2:09 ` U.Mutlu
2011-11-07 7:58 ` Ed W
0 siblings, 1 reply; 5+ messages in thread
From: U.Mutlu @ 2011-11-07 2:09 UTC (permalink / raw)
To: netfilter
Pablo Neira Ayuso wrote, On 2011-11-07 02:03:
> On Mon, Nov 07, 2011 at 02:02:19AM +0100, Pablo Neira Ayuso wrote:
>> On Fri, Nov 04, 2011 at 09:14:13PM +0100, U.Mutlu wrote:
>>> Hi,
>>> in my userland-app I'm calling the iptables binary to add and
>>> to remove iptables rules, but after moving to a Gigabit-Link
>>> I need a faster method.
>>> libiptc seems to fit the job but then it seems to be 'deprecated', is it really?
>>> Is there a successor to it, or other alternatives?
>>> Can I still use libiptc on a system where iptables v1.4.12 is installed?
>>
>> Pipe commands to iptables-save.
>
> Sorry, I meant to say iptables-restore, of course.
Hmm. I think in my case this method is suboptiomal because my
iptables rules do change very frequently (ie. banning individual
ip's at different times and then unbanning each after say x minutes,
again individually, ie. not as a group).
I think in this case I should stick with libiptc since it's still
part of the official iptables distribution.
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: libiptc or alternative
2011-11-07 2:09 ` U.Mutlu
@ 2011-11-07 7:58 ` Ed W
0 siblings, 0 replies; 5+ messages in thread
From: Ed W @ 2011-11-07 7:58 UTC (permalink / raw)
To: U.Mutlu; +Cc: netfilter
On 07/11/2011 02:09, U.Mutlu wrote:
>
> Hmm. I think in my case this method is suboptiomal because my
> iptables rules do change very frequently (ie. banning individual
> ip's at different times and then unbanning each after say x minutes,
> again individually, ie. not as a group).
>
> I think in this case I should stick with libiptc since it's still
> part of the official iptables distribution.
This is starting to sound like something ipset could help with?
Ed W
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2011-11-07 7:58 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-11-04 20:14 libiptc or alternative U.Mutlu
2011-11-07 1:02 ` Pablo Neira Ayuso
2011-11-07 1:03 ` Pablo Neira Ayuso
2011-11-07 2:09 ` U.Mutlu
2011-11-07 7:58 ` Ed W
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox