Linux Netfilter discussions
 help / color / mirror / Atom feed
* QUEUE function called twice?
@ 2005-09-08 11:43 Michael D. Berger
  2005-09-09  2:14 ` Michael D. Berger
  0 siblings, 1 reply; 3+ messages in thread
From: Michael D. Berger @ 2005-09-08 11:43 UTC (permalink / raw)
  To: netfilter

On RH-E-WS-4, in the Input chain, I send icmp type 8
to -j QUEUE, where my function DROPs the first three,
and ACCEPTs all thereafter.  The debug print in the
function shows that when I accept, my queue function
is called a second time (a total of two times for
each ping).  Is this to be expected?  If so, this
will be a problem for the ultimate intended use,
which is a complex, stateful filter for some nasty
stuff on port 80.

Thanks in advance for your help.
Mike.
--
Michael D. Berger
m.d.berger@ieee.org 




^ permalink raw reply	[flat|nested] 3+ messages in thread

* RE: QUEUE function called twice?
  2005-09-08 11:43 QUEUE function called twice? Michael D. Berger
@ 2005-09-09  2:14 ` Michael D. Berger
  2005-09-09 10:26   ` TheGesus
  0 siblings, 1 reply; 3+ messages in thread
From: Michael D. Berger @ 2005-09-09  2:14 UTC (permalink / raw)
  To: 'netfilter'

Mia culpa.  Because of a script error, I had two
similar -j QUEUE lines.  My apologies.
Mike.
--
Michael D. Berger
m.d.berger@ieee.org 

> -----Original Message-----
> From: netfilter-bounces@lists.netfilter.org 
> [mailto:netfilter-bounces@lists.netfilter.org] On Behalf Of 
> Michael D. Berger
> Sent: Thursday, September 08, 2005 7:43 AM
> To: netfilter
> Subject: QUEUE function called twice?
> 
> 
> On RH-E-WS-4, in the Input chain, I send icmp type 8
> to -j QUEUE, where my function DROPs the first three,
> and ACCEPTs all thereafter.  The debug print in the
> function shows that when I accept, my queue function
> is called a second time (a total of two times for
> each ping).  Is this to be expected?  If so, this
> will be a problem for the ultimate intended use,
> which is a complex, stateful filter for some nasty
> stuff on port 80.
> 
> Thanks in advance for your help.
> Mike.
> --
> Michael D. Berger
> m.d.berger@ieee.org 
> 
> 
> 
> 




^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: QUEUE function called twice?
  2005-09-09  2:14 ` Michael D. Berger
@ 2005-09-09 10:26   ` TheGesus
  0 siblings, 0 replies; 3+ messages in thread
From: TheGesus @ 2005-09-09 10:26 UTC (permalink / raw)
  To: netfilter

This has happened to me so many times I have started using /dev/rob0's
method of editing an iptables-restore file instead of writing a
script.  It seems to be the only way to guarantee tables and chains
get flushed between revisions.

On 9/8/05, Michael D. Berger <m.d.berger@ieee.org> wrote:
> Mia culpa.  Because of a script error, I had two
> similar -j QUEUE lines.  My apologies.
> Mike.
> --
> Michael D. Berger
> m.d.berger@ieee.org
>


^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2005-09-09 10:26 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-09-08 11:43 QUEUE function called twice? Michael D. Berger
2005-09-09  2:14 ` Michael D. Berger
2005-09-09 10:26   ` TheGesus

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox