Results 1 to 3 of 3
I'm looking to use Linux (Ubuntu 9.10) as a network bridge between two subnets. I can configure iptables to permit all traffic on eth0 (subnet 1) to pass to eth1 ...
- 02-25-2010 #1Just Joined!
- Join Date
- Feb 2010
- Posts
- 2
iptables
I'm looking to use Linux (Ubuntu 9.10) as a network bridge between two subnets. I can configure iptables to permit all traffic on eth0 (subnet 1) to pass to eth1 (subnet 2) but before transmitting that traffic I want to perform further analysis. Is it possible within iptables or via a third-party product such a pyroman, to write a "hook" that then directs that traffic to another application installed on the same host?
thanks
Doug
Student
IMSS, University of Reading, UK
- 02-26-2010 #2Just Joined!
- Join Date
- Nov 2008
- Posts
- 29
have a look at snort-inline on Google. You'll find others too that can do this. iptables is not going to look beyond the IP header of a packet: It's a firewall, so it's got no business with the data inside the packet.
Guus
- 02-26-2010 #3Just Joined!
- Join Date
- Feb 2010
- Posts
- 2
iptables
Guus,
Thats really helpful thanks for that. I will have a look at that
Doug


Reply With Quote