LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 04-01-2010, 05:50 AM   #1
hdinn
LQ Newbie
 
Registered: Jul 2009
Posts: 24

Rep: Reputation: 15
Angry Iptales --limit-burst problems


hello everybody

Actually i'm doing an ingenior training in SAGEM company, well i'm trying to develop an application which is able ti disturb the IP Network,my idea was is to mount 2 Network Interface Card (NIC) and make a bridge to pass the IP flow and to exploit the firewall Netfilter using iptables command.The application has to import a text file containing a binary array like this one:

0 1 0 : 0 corresponds to iptables -p ip ACCEPT
1 1 1 : 1 corresponds to iptables -p ip DROP
0 0 1

==> So the expected result is to have 5 ip datagrams dropped

My idea was: if 0 --> iptables -A FORWARD -p ip -m limit --limit-burst 1 -j ACCEPT
if 1 --> iptables -A FORWARD -p ip -m limit --limit-burst 1 -j DROP

The problem was: After executing the application and parsing the text file,
with iptables -L -v: i have

Code:
-A FORWARD -p ip -m limit --limit-burst 1 -j ACCEPT
-A FORWARD -p ip -m limit --limit-burst 1 -j DROP
-A FORWARD -p ip -m limit --limit-burst 1 -j ACCEPT
                                   .
                                   .
                                   .
.

which is logic, but when i sniff with wireshark i find more packets are dropped(6,7 or 8 are dropped), like i had put more DROP rules.
and sometimes i found the exact value(usually 5 dropped).

so i didn't arrive to an explication for this problem.

please help body.
 
Old 04-01-2010, 01:23 PM   #2
hdinn
LQ Newbie
 
Registered: Jul 2009
Posts: 24

Original Poster
Rep: Reputation: 15
please answer me if there is a solution )))
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Internet Dropping for short burst. Ace Blackwell Slackware 5 01-09-2010 10:05 PM
begining burst at download Bopi General 1 12-22-2009 09:02 PM
"-m limit --limit-burst 20" with my Netfilter doesn't work probably hdinn Linux - Networking 1 08-20-2009 07:49 AM
traffic control, burst?? blackzone Linux - Networking 2 08-02-2007 03:54 AM
When will the bubble burst. cadj General 7 09-09-2004 09:54 AM


All times are GMT -5. The time now is 10:54 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration