NFQUEUE Target in iptables

kikilinux · 04-04-2013, 05:36 AM

Hi ,i just want to know the libnetfilter_queue has only the DROP and ACCEPT target ?
We can't specify REJECT ?
Best

acid_kewpie · 04-04-2013, 06:53 AM

I'm not aware of any specific design reason, but if you want to put a REJECT at the bottom of the list, you can.

kikilinux · 04-04-2013, 12:48 PM

May i post this thread to another forum ?

eSelix · 04-04-2013, 02:14 PM

REJECT is a special target, like custom chain and therefore you probably cannot use it that way, however I am not expert in iptables queue. You need to drop packet and manually respond with proper ICMP message to mimic a REJECT target.

kikilinux · 04-04-2013, 03:29 PM

Another question about the function below related to libnetfilter_queue:

int nfq_set_queue_maxlen (struct nfq_q_handle * qh,u_int32_t queuelen)

How much can i take "queuelen" big (how many packets)?
Do we have to consider memory size consideration?
and another questions step by step after the answers

Best