REPOST: nfnetlink / ctnetlink / iptables2 questions
phil at ipom.com
Sat Dec 18 06:48:35 CET 2004
NOTE: I'm reposting this as I never got a response. I independently
posted to both netfilter and netfilter-devel before, but am now posting
to both. Hopefully _someone_ can answer this.
A while back Herald Welte emailed me (and CC'd the list) and suggested I
port my application (iptstate) to use the new ctnetlink/nfnetlink
framework (as opposed to reading data out of /proc).
I haven't had much time since then, but I decided to sit down and look
at this, and I'm a bit confused by what I found. I found libnfnetlink here:
and libctnetlink here:
And since cfnetlink requires nfnetlink, I went to compile that first.
And ran into some problems. So I started browsing the archives, and it
seems people refer to an old "ctnetlink/nfnetlink" and a new one... and
the new one is part of "iptables2" ? I haven't followed
netfilter/iptables developement very carefully, so I don't know what
iptables2 is, but seems to be the latest suite of "frontend"
applications to netfilter.
At the very least, libnfnetlink requires nfnetlink.h, which I would have
thought was part of libnfnetlink, but it appears it's not. I found a
mention of a "release" of iptables2 here:
but the download requires a password which I don't have. Additionally
the post talkes about a whole lot of kernel incompatibilities between
old versions and new versions and it doesn't appear the latest versions
have made it into the main kernel tree yet. Is this correct? If so, this
doesn't actually sound like something ready for primetime yet...
Perhaps someone can relate ctnetlink/nfnetlink (old and new) to
libcfnetlink/libnfnetlink and iptables2, and the current kernels for me?
Phil Dibowitz phil at ipom.com
Freeware and Technical Pages Insanity Palace of Metallica
"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
- Benjamin Franklin, 1759
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 256 bytes
Desc: OpenPGP digital signature
Url : /pipermail/netfilter-devel/attachments/20041217/5b806aa8/signature.bin
More information about the netfilter-devel