NetFilter
[Top] [All Lists]

Pid owner module

To: <netfilter@lists.netfilter.org>
Subject: Pid owner module
From: "zze-FREDI POIROT N ext RD-MAPS-LAN" <npoirot.ext@orange-ftgroup.com>
Date: Wed, 24 Jan 2007 10:37:55 +0100
Delivered-to: sp-com-lists@consult.net
Delivered-to: netfilter-list1@securepoint.com
In-reply-to: <9772C290CD0BDF4B91356C9102BA886A033DB22B@ftrdmel1.rd.francetelecom.fr>
List-archive: </pipermail/netfilter>
List-help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-id: General discussion and user questions <netfilter.lists.netfilter.org>
List-post: <mailto:netfilter@lists.netfilter.org>
List-subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
Sender: netfilter-bounces@lists.netfilter.org
Thread-index: Acc/mrloSbbQK3RNT12KfnDmmeHH+AAAIRng
Thread-topic: Pid owner module
Hello !
I'am trying to filter packet send from my PC according to pid,
(IPT_OWNER_PID) in order to log and exclude packets from a given app.

So I had a look to the iptables man page and tried to use the
--pid-owner feature with a rule like :
iptables -A OUTPUT -m owner --uid-owner $PID -j LOG --log-level 5
--log-prefix "[MyProcess]"


Unfortunately, on my kernel (see version bellow), this commands doesn't
work :
iptables: Unknown error 4294967295
And the trace in /var/log/messages :
Jan 24 10:25:47 localhost kernel: ipt_owner: pid, sid and command
matching not supported anymore

This functionnality seems to be not supported anymore, whereas on an
older kernel (2.6.12), it works perfectly...
Here is the kernel version : Linux l-dhcp-10337-2 2.6.17-5mdv #1 SMP Wed
Sep 13 14:32:31 EDT 2006 i686 Genuine Intel(R) CPU           T2300  @
1.66GHz GNU/Linux

A quick look in the source show me that it is not implemented anymore...

So, finally, here are my questions : 
1. is there still a functionality like this (PID filte) in iptables ? Is
there a replacement (another tool...) 2. How to activate (if possible)
the pid owner module ?
3. Since which kernel version has this module been disabled ?


Thanks for your help !
Nicolas


<Prev in Thread] Current Thread [Next in Thread>