Did you know LQ has a Linux Hardware Compatibility List?
Go Back > Forums > Linux Forums > Linux - Security
User Name
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.


  Search this Thread
Old 04-01-2010, 06:50 AM   #1
LQ Newbie
Registered: Jul 2009
Posts: 24

Rep: Reputation: 15
Angry Iptales --limit-burst problems

hello everybody

Actually i'm doing an ingenior training in SAGEM company, well i'm trying to develop an application which is able ti disturb the IP Network,my idea was is to mount 2 Network Interface Card (NIC) and make a bridge to pass the IP flow and to exploit the firewall Netfilter using iptables command.The application has to import a text file containing a binary array like this one:

0 1 0 : 0 corresponds to iptables -p ip ACCEPT
1 1 1 : 1 corresponds to iptables -p ip DROP
0 0 1

==> So the expected result is to have 5 ip datagrams dropped

My idea was: if 0 --> iptables -A FORWARD -p ip -m limit --limit-burst 1 -j ACCEPT
if 1 --> iptables -A FORWARD -p ip -m limit --limit-burst 1 -j DROP

The problem was: After executing the application and parsing the text file,
with iptables -L -v: i have

-A FORWARD -p ip -m limit --limit-burst 1 -j ACCEPT
-A FORWARD -p ip -m limit --limit-burst 1 -j DROP
-A FORWARD -p ip -m limit --limit-burst 1 -j ACCEPT

which is logic, but when i sniff with wireshark i find more packets are dropped(6,7 or 8 are dropped), like i had put more DROP rules.
and sometimes i found the exact value(usually 5 dropped).

so i didn't arrive to an explication for this problem.

please help body.
Old 04-01-2010, 02:23 PM   #2
LQ Newbie
Registered: Jul 2009
Posts: 24

Original Poster
Rep: Reputation: 15
please answer me if there is a solution )))


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Internet Dropping for short burst. Ace Blackwell Slackware 5 01-09-2010 11:05 PM
begining burst at download Bopi General 1 12-22-2009 10:02 PM
"-m limit --limit-burst 20" with my Netfilter doesn't work probably hdinn Linux - Networking 1 08-20-2009 08:49 AM
traffic control, burst?? blackzone Linux - Networking 2 08-02-2007 04:54 AM
When will the bubble burst. cadj General 7 09-09-2004 10:54 AM

All times are GMT -5. The time now is 07:05 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration