Re: Selectively refusing TCP connections

2001-05-24 Thread Andi Kleen
On Thu, May 24, 2001 at 12:15:44PM -0700, David Ford wrote: > Is there an example somewhere of this? I don't have one handy, but basically you have to hack libpcap a bit to push the generated filters using SO_ATTACH_FILTER onto a socket. The format (LPF) understood by the kernel is a superset of

Re: Selectively refusing TCP connections

2001-05-24 Thread David Ford
Is there an example somewhere of this? David >You can push a BPF (LPF) filter expression onto a LISTEN socket that checks >every incoming packet using SO_ATTACH_FILTER. > - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] Mor

Re: Selectively refusing TCP connections

2001-05-23 Thread Andi Kleen
On Wed, May 23, 2001 at 06:59:02PM +0100, Ben Mansell wrote: > Hi all, > > Is there any mechanism in Linux for refusing incoming TCP connections? > I'd like to be able to fetch the next incoming connection on a listen > queue, and selectively accept or reject it based on the IP address of the > c

Selectively refusing TCP connections

2001-05-23 Thread Ben Mansell
Hi all, Is there any mechanism in Linux for refusing incoming TCP connections? I'd like to be able to fetch the next incoming connection on a listen queue, and selectively accept or reject it based on the IP address of the client. I know this could be done via firewall rules, but for this case, I