ipchains blocks from SOCK_RAW?
tack@sault.org
Mon, 14 Sep 1998 20:45:54 -0400
I've noticed that, using ipchains (kernel 2.1.115), packet sniffers are unable
to see packets which are blocked by the firewall. As I recall, ipfwadm didn't
behave in this way. What I want to do is this: I have the firewall block
certain packets, but I would like to analyse these packets to see if they are
in fact malicious in nature. Is this possible?
Jason Tackaberry,
tack@sault.org
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/