Happy new year!
I'm implementing kraken-iptables now. It controls netfilter using iptables command line utility. At first time, I tried to implement it using JNI and libiptc. However, it was too complicated (iptables has complex plugin architecture) and I have to decode binary chunk (there is no easy structure member access). It's not meaningful job, and JNI is not portable. Because of this, I decided to use output of iptables user-mode program.
I'll implement heavily used match/target extensions first. Maybe I cannot implement all extensions for this time. There are too many extensions. I didn't know that so many extensions are built.. Orz..
----
2011-01-01 19:21 - added reject-with target extension support
태그 : kraken, kraken-iptables
덧글
2011/01/01 21:48 # 답글 
비공개 덧글입니다.
xeraph 2011/01/01 22:04 #
앗 여기에 덧글이 ㅋㅋ.. 요새 보셨던 것 중에 좋은게 있으면 감사히 받겠습니다 ㅎㅎ (다만 안 겹치는지 확인만..)