Link to home
Start Free TrialLog in
Avatar of skullnobrains
skullnobrains

asked on

iptables/netfilter u32 module match dns OPCODE = notify

hello all

i guess the topic is pretty much self explainatory : i'm trying to filter dns notifications with ipfilter

so far i tried a bunch of stuff such as the following without success
-A INPUT -p udp -m udp --dport 53 -d 127.0.0.5 ! -f -m u32 --u32 "0>>22&0x3C@8>>16&0xF=0x4" -j REJECT --reject-with icmp-port-unreachable

if there is a different way with a different module, i'll be glad to accept the answer

i'm not interested in suggestions using a different firewall or a separated application

thanks for your help
ASKER CERTIFIED SOLUTION
Avatar of skullnobrains
skullnobrains

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial