I have written portmapper patch for execute external script, when
one of RPC-service set or unset. And write Perl-script for it, which
insert or delete rule for accepting specified RPC-service port from
specified source-IP. External script starts in fork() (child), and when
some RPC-services must be opened (on portmapper restart), some scripts,
which execute `iptables' or `ipchains', try to add rules in one time. So
have added only part of them.
I must do external blocking mechanism for it? or exists any blocking
mechanism in netfilter?