rules monitor?

/dev/rob0 rob0 at gmx.co.uk
Thu Sep 29 08:57:06 CEST 2005


On Wednesday 2005-September-28 18:46, Guido Lorenzutti wrote:
> Hi people. Does anyone knows any tool to monitor the iptables rules
> to check if they are what they should and apply them if not? I
> mean... check if every single rule is running and warn or apply them
> if they are removed?

Hmmm ... why would the rules have changed? Only root can manipulate 
iptables rules.

If you mean that an interface changes IP or goes down, I suggest 
scripting something that takes place in that event, such as a pppd 
ip-up or ip-down script or the DHCP client equivalents.

If you're talking about a remote IP changing or something similar, no, 
you will have to write your own script, perhaps run it as a cron job. 
IAC you should be more specific about the problem you are trying to 
solve.
-- 
    mail to this address is discarded unless "/dev/rob0"
    or "not-spam" is in Subject: header



More information about the netfilter mailing list