netdev - Re:Re: How to set the filtering rules for drop the packets

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <6a2bd57e.18e1d.14587cb4cea.Coremail.mstian88@163.com>
Date:	Tue, 22 Apr 2014 12:56:58 +0800 (CST)
From:	mstian88 <mstian88@....com>
To:	"Ben Hutchings" <ben@...adent.org.uk>
Cc:	bwh@...nel.org, netdev@...r.kernel.org
Subject: Re:Re: How to set the filtering rules for drop the packets

thanks for your reply , 

 my NIC is intel X540-T1, when i set dst-port filter first ,suceess, but then set src-port filter failed。

That is to say the filter rule src-port and dis-port can't set together。

There are any other ways to filter the packets that srcport is 80 or dstport is 80?
                                              
                                                                                                                 monney
At 2014-04-21 19:49:04,"Ben Hutchings" <ben@...adent.org.uk> wrote:
>On Mon, 2014-04-21 at 17:54 +0800, mstian88 wrote:
>> Dear Ben Hutchings.
>> 
>> 
>> I want to discard the packets (srcport==80  or dstport==80),  how can
>> i do?
>>
>> eg.
>> I set the rule for discard the packets that src port is 80:
>> ethtool -U eth0 flow-type tcp4 src-port 80 action -1    Success
>> 
>> 
>> then set the rule for discard the packets that dst port is 80:
>> ethtool -U eth0 flow-type tcp4 dst-port 80 action -1    Failed
>> the error info is :
>> rmgr: Cannot insert RX class rule: Invalid argument
>
>The sets of fields you can filter by vary greatly between different
>drivers and network controllers.  It looks like the driver for eth0 just
>doesn't support filtering by dst-port only.
>
>Ben.
>
>
>-- 
>Ben Hutchings
>Knowledge is power.  France is bacon.