Invoke command through iptables

ALInux · 02-20-2014, 11:35 AM

Hi
Is it possible to invoke a command through iptables, I.e. instead of -j ACCDEPT , -j someScript.sh, this is for a specific test scenario. Any ideas ?
Thanks

unSpawn · 02-20-2014, 04:30 PM

Could port knocking help? Basically you'd be able to configure a custom command using knockd.

ALInux · 02-21-2014, 04:26 AM

Hi Unspawn
Actually knockd does look like a viable solution, my only problem is that I do have 15 IPs and I only want to execute the command when two destinations IPs are hit, do you have any idea of whether knockd takes the destination IP as an argument apart from ports ?
Thanks !

unSpawn · 02-21-2014, 12:29 PM

I don't but it's something you can find out yourself. You'd probably be able to get what you need with the right iptables rules.