netdev - netfilter hooks for IFB device

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <1259163020.28137.141.camel@luna.tc.commsmundi.com>
Date:	Wed, 25 Nov 2009 16:30:20 +0100
From:	François Delawarde 
	<fdelawarde@...elessmundi.com>
To:	netdev@...r.kernel.org
Subject: netfilter hooks for IFB device

Hi,

I'm interested in adding optional netfilter hooks to the IFB device
(enabled by module param), in order to have full IMQ functionality (to
use CONNMARKs and others) without having to add any iptables or
netfilter target.

I'm aiming for something very simple inspired by this older IMQ
implementation:
http://pupa.da.ru/imq/imq.c

The only thing is, I have no idea what to do in the callback function
once the netfilter hooks are registered.

How can I 'steal' the packet in the hook and make it pass through
ifb_xmit to have it enqueued?

Thanks,
François.

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html