How can I programmatically manage iptables rules on the fly?

by

From the netfilter FAQ:

The answer unfortunately is: No.

Now you might think ‘but what about libiptc?’. As has been pointed out numerous times on the mailinglist(s), libiptc was NEVER meant to be used as a public interface. We don’t guarantee a stable interface, and it is planned to remove it in the next incarnation of linux packet filtering. libiptc is way too low-layer to be used reasonably anyway.

We are well aware that there is a fundamental lack for such an API, and we are working on improving that situation. Until then, it is recommended to either use system() or open a pipe into stdin of iptables-restore. The latter will give you a way better performance.

More Related Contents:

  1. Is there a way for non-root processes to bind to “privileged” ports on Linux?
  2. How to add a new device in QEMU source code?
  3. How do I programmatically disable hardware prefetching?
  4. Connection refused to MongoDB errno 111
  5. How does Linux determine the next PID?
  6. Does linux schedule a process or a thread?
  7. What is path //, how is it different from /
  8. kernel symbol marked with “T” in /proc/kallsyms is not exported
  9. Sending UDP packets from the Linux Kernel
  10. How do the likely/unlikely macros in the Linux kernel work and what is their benefit?
  11. ./configure : /bin/sh^M : bad interpreter [duplicate]
  12. What is the equivalent to Posix popen() in the Win32 API?
  13. Calling printf in x86_64 using GNU assembler
  14. Keep SSH session alive [closed]
  15. Maximum length of command line argument that can be passed to SQL*Plus?
  16. Perl command line multi-line replace
  17. How to handle OpenSSL SSL_ERROR_WANT_READ / WANT_WRITE on non-blocking sockets
  18. Linux Script to check if process is running and act on the result
  19. How can I select a static library to be linked while ARM cross compiling?
  20. How to configure postgresql for the first time?
  21. How to monitor Linux UDP buffer available space?
  22. How Linux handles threads and process scheduling
  23. Any way to reserve but not commit memory in linux?
  24. Restarting cron after changing crontab file? [closed]
  25. How to exit if a command failed? [duplicate]
  26. Where are include files stored – Ubuntu Linux, GCC
  27. What is global _start in assembly language?
  28. How to discover what Linux distribution is in use
  29. How to convert Linux 32-bit gcc inline assembly to 64-bit code? [closed]
  30. bash: set array env variable and de-referencing it from any shell script fails

Leave a Comment