Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Visham Ramsurrun <vishamr2000@gmail.com>
To: Jan Engelhardt <jengelh@linux01.gwdg.de>
Cc: Netfilter User Mailing List <netfilter@lists.netfilter.org>
Subject: Re: rc.local
Date: Thu, 28 Jul 2005 10:54:50 +0400	[thread overview]
Message-ID: <9927912d050727235450a939b0@mail.gmail.com> (raw)
In-Reply-To: <Pine.LNX.4.61.0507280830530.6616@yvahk01.tjqt.qr>

I am running the same script for all the packets. After it finishes
execution, it waits for the next signal (i.e the next packet to pass)

Regards,
Visham 

On 7/28/05, Jan Engelhardt <jengelh@linux01.gwdg.de> wrote:
> >> > you are right..i'm having a scripting problem..i don't know how to
> >> > make a script execute every time a packet is sent by my PC. how can i
> >> > do that?
> >>
> >> You don't want to execute a script for each packet... you could be
> >> easily DoSed. Try:
> >>
> >> http://netfilter.org/patch-o-matic/pom-base.html#pom-base-nth
> >> Please reply to the list, so everyone can help and learn. =)
> >
> >No I only want to execute a script for all packets that are packets
> >that are going to be sent out of the NIC (after the packets have been
> 
> That's still a DOS. If I pingflood you, your machine will most likely respond
> with "pongflood".
> 
> I have iptraf running for like 4 or 5 days now and it shows almost 11 GB
> which approximates to ~ 34 KB/sec (inet radio ;). Let's assume that every
> packet was 1500 bytes long - then this would mean that I would be starting 23
> processes per second, which really is inefficient.
> 
> And, you're looking for -j QUEUE.
> 
> >accepted as valid by a firewall). I don't know how to do that. Do you
> >know what is the last function in the iptables code or the first
> >function in the NIC driver, that a packet that has been accepted by
> >the firewall passes before it is sent on the wire? I would then write
> >some code so that when a call is made to that function, a signal is
> >raised and it will cause a shell script to execute.
> >I don't know abt the DoSed command. Do you have any example?
> >
> >If there is an easier way, please let me know...
> >
> >MAny thx for the reply.
> >
> >Warm regards,
> >Visham
> >
> >
> 
> Jan Engelhardt
> --
> | Alphagate Systems, http://alphagate.hopto.org/
>


  reply	other threads:[~2005-07-28  6:54 UTC|newest]

Thread overview: 14+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <42e607e9.6446401e.6174.46a7SMTPIN_ADDED@mx.gmail.com>
2005-07-26 11:30 ` rc.local Visham Ramsurrun
2005-07-26 15:38   ` rc.local curby .
     [not found]     ` <9927912d050726221615fe208f@mail.gmail.com>
2005-07-27 16:42       ` rc.local curby .
2005-07-28  5:31         ` rc.local Visham Ramsurrun
2005-07-28  6:34           ` rc.local Jan Engelhardt
2005-07-28  6:54             ` Visham Ramsurrun [this message]
2005-07-28  7:34         ` rc.local Visham Ramsurrun
     [not found]           ` <3075.217.166.67.34.1122545502.squirrel@217.166.67.34>
     [not found]             ` <9927912d050728035556e1f9c2@mail.gmail.com>
     [not found]               ` <3255.217.166.67.34.1122550077.squirrel@217.166.67.34>
2005-07-28 12:03                 ` rc.local Visham Ramsurrun
2005-07-29  7:55           ` rc.local Jan Engelhardt
2005-07-26 11:57 ` executing a firewall script!! Visham Ramsurrun
2005-07-26 12:23   ` Carl Holtje ;021;vcsg6;
     [not found]     ` <9927912d0507260546168ad046@mail.gmail.com>
2005-07-26 13:09       ` Carl Holtje ;021;vcsg6;
     [not found] <42e5502e.57dde3f4.2ba3.ffff9d47SMTPIN_ADDED@mx.gmail.com>
2005-07-26  9:51 ` rc.local Visham Ramsurrun
2005-07-26 10:41   ` rc.local /dev/rob0

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=9927912d050727235450a939b0@mail.gmail.com \
    --to=vishamr2000@gmail.com \
    --cc=jengelh@linux01.gwdg.de \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox