Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
| Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
 |
05-23-2006, 08:50 PM
|
#1
|
|
Member
Registered: Dec 2005
Location: This planet
Distribution: Debian,Xubuntu
Posts: 567
Rep: 
|
creation of new iptables chains !!!!
Am i wrong if i say creation of new chains in iptables is also creation of new jumps like:
Quote:
$ipt -N ULOGDROP
$ipt -A ULOGDROP -j ULOG --ulog-prefix "OUTofORDER:"
$ipt -A ULOGDROP -j DROP
$ipt -A INPUT -j ULOGDROP
|
Just for checking i got it .... |
|
|
|
|
05-23-2006, 11:48 PM
|
#2
|
|
LQ Guru
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870
|
Quote:
|
Originally Posted by gabsik
Am i wrong if i say creation of new chains in iptables is also creation of new jumps like:
$ipt -N ULOGDROP
$ipt -A ULOGDROP -j ULOG --ulog-prefix "OUTofORDER:"
$ipt -A ULOGDROP -j DROP
$ipt -A INPUT -j ULOGDROP
Just for checking i got it ....
|
yes, technically you are wrong... chain creation and jumps are two different things...
having said that, your example seems fine as far as syntax is concerned... first you created a chain called ULOGDROP... then you appended a rule to it, sending all packets to the ULOG target... then you appended to it another rule blocking all packets... and then you appended a rule to the INPUT chain sending the packets to the ULOGDROP chain... pretty straight-forward stuff... |
|
|
|
|
05-24-2006, 01:24 PM
|
#3
|
|
Member
Registered: Dec 2005
Location: This planet
Distribution: Debian,Xubuntu
Posts: 567
Original Poster
Rep:
|
Quote:
|
$ipt -A INPUT -j ULOGDROP
|
So packets here are going to be ulogd with prefix "OUTofORDER:" and than dropped wherever i use the -j ULOGDROP.I have built a jump ULOGDROP ... |
|
|
|
|
05-24-2006, 10:43 PM
|
#4
|
|
Member
Registered: Dec 2005
Location: This planet
Distribution: Debian,Xubuntu
Posts: 567
Original Poster
Rep:
|
Let's say i have created a chain called BLACKLIST,than i make another chain ULOGDROP ... i can mix the 2 things like this:
Quote:
|
$IPT -A BLACKLIST -d 192.168.0.2 -j ULOGDROP
|
Do I?
Last edited by gabsik; 05-24-2006 at 10:50 PM.
|
|
|
|
|
05-25-2006, 01:48 AM
|
#5
|
|
LQ Guru
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870
|
Quote:
|
Originally Posted by gabsik
Let's say i have created a chain called BLACKLIST,than i make another chain ULOGDROP ... i can mix the 2 things like this:
$IPT -A BLACKLIST -d 192.168.0.2 -j ULOGDROP
Do I?
|
yes, of course... |
|
|
|
|
05-25-2006, 05:27 PM
|
#6
|
|
Member
Registered: Dec 2005
Location: This planet
Distribution: Debian,Xubuntu
Posts: 567
Original Poster
Rep:
|
The can be both used as a chain and or jump ...
|
|
|
|
|
05-25-2006, 06:57 PM
|
#7
|
|
LQ Guru
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870
|
Quote:
|
Originally Posted by gabsik
The can be both used as a chain and or jump ...
|
a jump refers to jumping from one chain to another by using another chain as a target for the relevant rule...
http://www.faqs.org/docs/iptables/targets.html |
|
|
|
All times are GMT -5. The time now is 03:34 PM.
|
|
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
|
 Latest Threads
LQ News
|
|
