Very Computer

by **Liam** » Mon, 16 Oct 2000 10:01:04

Hi,
I need to be able to enable/disable certain IP addresses when
requested. I know you can do that by using IPChains, but what
is the best way for a program to alter the IPChain rules? Is there
a more direct low-level way of doing that? Rather than running
a shell command with ipchains.
Cheers
Liam

by **James Knot** » Mon, 16 Oct 2000 04:00:00

I don't know what you're looking for. What could be more
simple & direct, than using an ipchains command? If you
can't remember the details, figure it out once, then write a
script.

> Hi,
> I need to be able to enable/disable certain IP addresses when
> requested. I know you can do that by using IPChains, but what
> is the best way for a program to alter the IPChain rules? Is there
> a more direct low-level way of doing that? Rather than running
> a shell command with ipchains.
> Cheers
> Liam

--
Replies sent via e-mail to this address will be promptly
ignored.

"james.knott".

by **Liam** » Tue, 17 Oct 2000 04:00:00

> I don't know what you're looking for. What could be more
> simple & direct, than using an ipchains command? If you
> can't remember the details, figure it out once, then write a
> script.

Ok, maybe if I explain it a bit better you might get what I'm
trying to do.
What I'm intending to do is write a small server/deamon(?),
a binary written in C, not a script.
It will listen on a port for request to enable/disable IPs.
When it gets a request it needs to some how use IPChains,
does IPChains use functions that are publicly accessable or
would I have to get my program to run a shell command,
"ipchains -I input 1 -s ....", to get it to update the chains?
Hope this clears it up.
Cheers
Liam

> > Hi,
> > I need to be able to enable/disable certain IP addresses when
> > requested. I know you can do that by using IPChains, but what
> > is the best way for a program to alter the IPChain rules? Is there
> > a more direct low-level way of doing that? Rather than running
> > a shell command with ipchains.
> > Cheers
> > Liam

by **vanbaren_gera** » Tue, 17 Oct 2000 04:00:00

>> I don't know what you're looking for. What could be more
>> simple & direct, than using an ipchains command? If you
>> can't remember the details, figure it out once, then write a
>> script.
>Ok, maybe if I explain it a bit better you might get what I'm
>trying to do.
>What I'm intending to do is write a small server/deamon(?),
>a binary written in C, not a script.
>It will listen on a port for request to enable/disable IPs.
>When it gets a request it needs to some how use IPChains,
>does IPChains use functions that are publicly accessable or
>would I have to get my program to run a shell command,
>"ipchains -I input 1 -s ....", to get it to update the chains?
>Hope this clears it up.
>Cheers
>Liam

>> > Hi,
>> > I need to be able to enable/disable certain IP addresses when
>> > requested. I know you can do that by using IPChains, but what
>> > is the best way for a program to alter the IPChain rules? Is there
>> > a more direct low-level way of doing that? Rather than running
>> > a shell command with ipchains.
>> > Cheers
>> > Liam

man system

SYSTEM(3) Linux Programmer's Manual SYSTEM(3)

NAME
system - execute a shell command

SYNOPSIS
#include <stdlib.h>

int system (const char * string);

DESCRIPTION
system() executes a command specified in string by calling
/bin/sh -c string, and returns after the command has been
completed. During execution of the command, SIGCHLD will
be blocked, and SIGINT and SIGQUIT will be ignored.

RETURN VALUE
The value returned is 127 if the execve() call for /bin/sh
fails, -1 if there was another error and the return code
of the command otherwise.

If the value of string is NULL, system() returns nonzero
if the shell is available, and zero if not.

system() does not affect the wait status of any other
children.

CONFORMING TO
ANSI C, POSIX.2, BSD 4.3

--
+---------------------------------------------------------------------------+

| My employer is a company. Companies are artifacts of a legal system. |
|________________Artifacts are incapable of having opinions.________________|

Very Computer

Further IPChains

Further IPChains

Further IPChains

Further IPChains

Further IPChains