From: Visham Ramsurrun <vishamr2000@gmail.com>
To: Jan Engelhardt <jengelh@linux01.gwdg.de>
Cc: Netfilter User Mailing List <netfilter@lists.netfilter.org>
Subject: Re: rc.local
Date: Thu, 28 Jul 2005 10:54:50 +0400 [thread overview]
Message-ID: <9927912d050727235450a939b0@mail.gmail.com> (raw)
In-Reply-To: <Pine.LNX.4.61.0507280830530.6616@yvahk01.tjqt.qr>
I am running the same script for all the packets. After it finishes
execution, it waits for the next signal (i.e the next packet to pass)
Regards,
Visham
On 7/28/05, Jan Engelhardt <jengelh@linux01.gwdg.de> wrote:
> >> > you are right..i'm having a scripting problem..i don't know how to
> >> > make a script execute every time a packet is sent by my PC. how can i
> >> > do that?
> >>
> >> You don't want to execute a script for each packet... you could be
> >> easily DoSed. Try:
> >>
> >> http://netfilter.org/patch-o-matic/pom-base.html#pom-base-nth
> >> Please reply to the list, so everyone can help and learn. =)
> >
> >No I only want to execute a script for all packets that are packets
> >that are going to be sent out of the NIC (after the packets have been
>
> That's still a DOS. If I pingflood you, your machine will most likely respond
> with "pongflood".
>
> I have iptraf running for like 4 or 5 days now and it shows almost 11 GB
> which approximates to ~ 34 KB/sec (inet radio ;). Let's assume that every
> packet was 1500 bytes long - then this would mean that I would be starting 23
> processes per second, which really is inefficient.
>
> And, you're looking for -j QUEUE.
>
> >accepted as valid by a firewall). I don't know how to do that. Do you
> >know what is the last function in the iptables code or the first
> >function in the NIC driver, that a packet that has been accepted by
> >the firewall passes before it is sent on the wire? I would then write
> >some code so that when a call is made to that function, a signal is
> >raised and it will cause a shell script to execute.
> >I don't know abt the DoSed command. Do you have any example?
> >
> >If there is an easier way, please let me know...
> >
> >MAny thx for the reply.
> >
> >Warm regards,
> >Visham
> >
> >
>
> Jan Engelhardt
> --
> | Alphagate Systems, http://alphagate.hopto.org/
>
next prev parent reply other threads:[~2005-07-28 6:54 UTC|newest]
Thread overview: 14+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <42e607e9.6446401e.6174.46a7SMTPIN_ADDED@mx.gmail.com>
2005-07-26 11:30 ` rc.local Visham Ramsurrun
2005-07-26 15:38 ` rc.local curby .
[not found] ` <9927912d050726221615fe208f@mail.gmail.com>
2005-07-27 16:42 ` rc.local curby .
2005-07-28 5:31 ` rc.local Visham Ramsurrun
2005-07-28 6:34 ` rc.local Jan Engelhardt
2005-07-28 6:54 ` Visham Ramsurrun [this message]
2005-07-28 7:34 ` rc.local Visham Ramsurrun
[not found] ` <3075.217.166.67.34.1122545502.squirrel@217.166.67.34>
[not found] ` <9927912d050728035556e1f9c2@mail.gmail.com>
[not found] ` <3255.217.166.67.34.1122550077.squirrel@217.166.67.34>
2005-07-28 12:03 ` rc.local Visham Ramsurrun
2005-07-29 7:55 ` rc.local Jan Engelhardt
2005-07-26 11:57 ` executing a firewall script!! Visham Ramsurrun
2005-07-26 12:23 ` Carl Holtje ;021;vcsg6;
[not found] ` <9927912d0507260546168ad046@mail.gmail.com>
2005-07-26 13:09 ` Carl Holtje ;021;vcsg6;
[not found] <42e5502e.57dde3f4.2ba3.ffff9d47SMTPIN_ADDED@mx.gmail.com>
2005-07-26 9:51 ` rc.local Visham Ramsurrun
2005-07-26 10:41 ` rc.local /dev/rob0
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=9927912d050727235450a939b0@mail.gmail.com \
--to=vishamr2000@gmail.com \
--cc=jengelh@linux01.gwdg.de \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox