lkml.org 
[lkml]   [2001]   [Jan]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: Firewall netlink question...
    Hi,

    > QUEUE means to pass the packet to userspace (if supported by the kernel).

    Looking at the code it seemed to do the same thing as the old netlink, but
    with more complexity, to what end though, i couldnt tell, was only a brief
    skim.

    > $ sed -n -e '1874,1876p' /usr/src/linux-2.4.0/Documentation/Configure.help
    > CONFIG_IP_NF_QUEUE
    > Netfilter has the ability to queue packets to user space: the
    > netlink device can be used to access them using this driver.
    >
    > $ lynx /usr/share/doc/iptables/html/packet-filtering-HOWTO-7.html
    >

    Yeah, after some quick googling and freshmeating, i came accross a daemon
    that picked up these QUEUEd packets and multiplexed them to various child
    processes, which seemed very innefcient, the documentation said something
    about QUEUE not being multicast in nature, like the old firewall netlink.

    What was wrong with the firewall netlink? My re-implementation works great
    here. I can't see why anything else would be needed, QUEUE seems twice as
    complex. Unless with QUEUE the userspce applications can make decisions on
    what to do with the packet? In which case, it would be far too inefficient
    for an application like mine, where all i need is to be able to read the
    IP datagrams..

    Am I missing something totally obvious?

    Regards

    --
    // Gianni Tedesco <scaramanga@barrysworld.com>
    Fingerprint: FECC 237F B895 0379 62C4 B5A9 D83B E2B0 02F3 7A68
    Key ID: 02F37A68

    egg.microsoft.com: Remote operating system guess: Solaris 2.6 - 2.7

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 13:13    [W:3.881 / U:0.100 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site