Um... no...

If your default table policy is DROP then 
libipq ACCEPT does not equal -j ACCEPT...

At least, that's not the way it used to be...

-AEF


On Thu, 2002-01-03 at 01:12, Rob McMillen wrote:
> Ian,
> 
> > No, if you issue ACCEPT it is just accepted, like the ACCEPT
> > target. The ipq_set_verdict(3) man page might have given you
> > impression that it continues traversal of the rules, but it simply
> > continues traversal through the kernel.
> 
> That makes perfect sense.  Thanks.  Don't know why I thought it would keep
> going.  I guess I just have to make sure I have all the firewall rules I
> need in place before I sent the packet off to the QUEUE.
> 
> > If there is no userspace listener then QUEUE will drop the traffic as
> > described in libipq(3).
> 
> Again,  makes sense.  Thanks.  Anyone messed with libipq before?  Would it
> be too hard to implement the same type of functionality that you have with
> iptables (i.e.  REJECT, RETURN)?
> 
> Rob
> 
> 
> _______________________________________________
> Hogwash-iptables mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/hogwash-iptables
> 

_______________________________________________
Bridge mailing list
[EMAIL PROTECTED]
http://www.math.leidenuniv.nl/mailman/listinfo/bridge

Reply via email to