netdev - Re: How to set the filtering rules for drop the packets

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <1398080944.3624.99.camel@deadeye.wl.decadent.org.uk>
Date:	Mon, 21 Apr 2014 12:49:04 +0100
From:	Ben Hutchings <ben@...adent.org.uk>
To:	mstian88 <mstian88@....com>
Cc:	bwh@...nel.org, netdev@...r.kernel.org
Subject: Re: How to set the filtering rules for drop the packets

On Mon, 2014-04-21 at 17:54 +0800, mstian88 wrote:
> Dear Ben Hutchings.
> 
> 
> I want to discard the packets (srcport==80  or dstport==80),  how can
> i do?
>
> eg.
> I set the rule for discard the packets that src port is 80:
> ethtool -U eth0 flow-type tcp4 src-port 80 action -1    Success
> 
> 
> then set the rule for discard the packets that dst port is 80:
> ethtool -U eth0 flow-type tcp4 dst-port 80 action -1    Failed
> the error info is :
> rmgr: Cannot insert RX class rule: Invalid argument

The sets of fields you can filter by vary greatly between different
drivers and network controllers.  It looks like the driver for eth0 just
doesn't support filtering by dst-port only.

Ben.


-- 
Ben Hutchings
Knowledge is power.  France is bacon.

Download attachment "signature.asc" of type "application/pgp-signature" (812 bytes)