|
|
Developing netfilter/iptables extensions
The linux 2.4.x/2.5.x packet filtering subsystem based on netfilter and iptables provides a very modular architecture that allows the advanced user to implement new functionality as kernel modules.
The tutorial covers:
- guided tour through netfilter/iptables architecture
- discussion of the in-kernel API's exported for netfilter/iptables modules
- writing a new iptables match module
- writing the iptables-command plugin for this new match module
- writing a sample conntrack/NAT helper module
Target audience:
- advanced firewall admins with some programming skills
Prior knowledge required:
- knowledge about TCP/IP
- firewalling basics
- iptables usage
- C programming (no kernel experience needed)
|
|
