Getting information from Netfilter

yiux · 03-26-2007, 10:58 PM

I want to build a c program to enable me to interact with Netfilter directly without using iptables.

Is is possible to get details such as chains available, the rules set with their specific details (source, destination, protocol ...) by using a system call or any function.

slzckboy · 03-28-2007, 08:51 AM

try this...

I havn't used it yet but It might suit your needs..

http://www.netfilter.org/projects/li...log/index.html

theNbomr · 03-28-2007, 12:02 PM

Since iptables is simply a userland application that interacts with the kernel, you should be able to locate the source code for iptables, and from that, divine what system calls it is using to manipulate the kernel and related data structures. There may even be a documented API for this, and I would guess it would be referenced somewhere with the iptables package.

--- rod.

theNbomr · 03-28-2007, 12:21 PM

Okay, I just did a little browsing, since this question piqued my interest somewhat. There is the document http://www.netfilter.org/documentati...OWTO.html#toc4 which describes what you are after, AFAICT.
--- rod.

yiux · 03-29-2007, 12:11 AM

thx rod, this how to seems to suit my needs. I have had a look a it, and there are many things missing. It seems like module programming.

Well this will do to get started.