| To: | <netfilter@lists.netfilter.org> |
|---|---|
| Subject: | Pid owner module |
| From: | "zze-FREDI POIROT N ext RD-MAPS-LAN" <npoirot.ext@orange-ftgroup.com> |
| Date: | Wed, 24 Jan 2007 10:37:55 +0100 |
| Delivered-to: | sp-com-lists@consult.net |
| Delivered-to: | netfilter-list1@securepoint.com |
| In-reply-to: | <9772C290CD0BDF4B91356C9102BA886A033DB22B@ftrdmel1.rd.francetelecom.fr> |
| List-archive: | </pipermail/netfilter> |
| List-help: | <mailto:netfilter-request@lists.netfilter.org?subject=help> |
| List-id: | General discussion and user questions <netfilter.lists.netfilter.org> |
| List-post: | <mailto:netfilter@lists.netfilter.org> |
| List-subscribe: | <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe> |
| List-unsubscribe: | <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe> |
| Sender: | netfilter-bounces@lists.netfilter.org |
| Thread-index: | Acc/mrloSbbQK3RNT12KfnDmmeHH+AAAIRng |
| Thread-topic: | Pid owner module |
Hello ! I'am trying to filter packet send from my PC according to pid, (IPT_OWNER_PID) in order to log and exclude packets from a given app. So I had a look to the iptables man page and tried to use the --pid-owner feature with a rule like : iptables -A OUTPUT -m owner --uid-owner $PID -j LOG --log-level 5 --log-prefix "[MyProcess]" Unfortunately, on my kernel (see version bellow), this commands doesn't work : iptables: Unknown error 4294967295 And the trace in /var/log/messages : Jan 24 10:25:47 localhost kernel: ipt_owner: pid, sid and command matching not supported anymore This functionnality seems to be not supported anymore, whereas on an older kernel (2.6.12), it works perfectly... Here is the kernel version : Linux l-dhcp-10337-2 2.6.17-5mdv #1 SMP Wed Sep 13 14:32:31 EDT 2006 i686 Genuine Intel(R) CPU T2300 @ 1.66GHz GNU/Linux A quick look in the source show me that it is not implemented anymore... So, finally, here are my questions : 1. is there still a functionality like this (PID filte) in iptables ? Is there a replacement (another tool...) 2. How to activate (if possible) the pid owner module ? 3. Since which kernel version has this module been disabled ? Thanks for your help ! Nicolas |
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: IPtables does not save it's settings, Ted Phelps |
|---|---|
| Next by Date: | Re: Pid owner module, Pascal Hambourg |
| Previous by Thread: | IPtables does not save it's settings, Ronald |
| Next by Thread: | Re: Pid owner module, Pascal Hambourg |
| Indexes: | [Date] [Thread] [Top] [All Lists] |