Changing netfilter rules from a kernel module

[spid spid]

I've written a netfilter match for port knocking.  I
need a way of modifying rules from a kernel module. 
Currently, what I have is a server that reads from
/proc/net/portknock to see which knocks are open and
which knocks are closed.

Is changing [a] rule(s) from a kernel module currently
possible?

If so, is there any reason not do to it this way?

it's not a port knocking question, but you may visit
www.portknocking.org to view information about this
idea.

Thanks.



		
_______________________________
Do you Yahoo!?
Declare Yourself - Register online to vote today!
http://vote.yahoo.com