Firewall rule setting from kernel code
 

Hi all,

I am new to Linux Kernel Programming and working on an application where I need to block some specific traffic which is identified by my code. How can I write a rule to block some specific traffic from kernel code?

Thanks for your willingness to help.

AspiringLion

************************************************************************
Lead me from darkness to light --- Brhadaranyaka Upanishad ************************************************************************

please use nf_register_hook()/nf_unregister_hook kernel API

Thanks
 

Thanks blues1207 for your helpful reply.
In fact I was using it for analyzing traffic but did not thought that the same can be used for dropping the traffic also.

Thanks again.

AspiringLion

Query about sk_buff
 

How can I read source IP address using sk_buff?
I mean which variable has it?

Thanks for your willingness to help.

aspiringlion