Re: TCP port firewall incl. description and english variable names

From: Antonin Steinhauser
Date: Fri Aug 12 2011 - 12:11:16 EST


OK
Dne 12.8.2011 17:34, Eric Dumazet napsal(a):
Le vendredi 12 aoÃt 2011 Ã 17:10 +0200, Tonda a Ãcrit :
Module that is used to open, close or filter specified TCP port by
sending certain sequence of UDP packets to predefined UDP ports
(password-like firewall). One sequence of UDP ports is the opening key
and sending packets successively to them opens the TCP port and the
second sequence of UDP ports is the closing key and sending packets
successively to them closes the TCP port. If between two UDP packets
in the sequence comes more than 16 another UDP packets, the sequence
(either opening or closing) is aborted. The configuration and view of
affected TCP port, opening and closing key and other firewall
parameters is made throw use of sysfs.

Signed-off-by: Antoine Steinhauser<as@xxxxxxxxxxx>
Antoine

There is no chance this can be added in official linux kernel, its
really too ugly, and can be implemented using standard iptables rules,
and userland controller, adding encryption and other high level stuff if
needed.





--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/