skullnobrains
asked on
iptables/netfilter u32 module match dns OPCODE = notify
hello all
i guess the topic is pretty much self explainatory : i'm trying to filter dns notifications with ipfilter
so far i tried a bunch of stuff such as the following without success
-A INPUT -p udp -m udp --dport 53 -d 127.0.0.5 ! -f -m u32 --u32 "0>>22&0x3C@8>>16&0xF=0x4" -j REJECT --reject-with icmp-port-unreachable
if there is a different way with a different module, i'll be glad to accept the answer
i'm not interested in suggestions using a different firewall or a separated application
thanks for your help
i guess the topic is pretty much self explainatory : i'm trying to filter dns notifications with ipfilter
so far i tried a bunch of stuff such as the following without success
-A INPUT -p udp -m udp --dport 53 -d 127.0.0.5 ! -f -m u32 --u32 "0>>22&0x3C@8>>16&0xF=0x4"
if there is a different way with a different module, i'll be glad to accept the answer
i'm not interested in suggestions using a different firewall or a separated application
thanks for your help
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.