This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Feature Request for QUEUE

It would be a great help if Astaro would include "QUEUE" as one of the available actions in the packet filter rules window. It shouldn't be a big issue. Just add QUEUE as a valid option in the pulldown, right?
This would be a great help. For those who don't care to use it, just don't select it when creating a filter rule.
Please.
Please.
Please.

This thread was automatically locked due to age.

Parents

0 bergy over 22 years ago

what should the action "QUEUE" do???
Cancel
Vote Up 0 Vote Down

Cancel
0 JimmyM over 22 years ago in reply to bergy

The QUEUE action for a iptables rule sends the packet to the userspace where something like Snort-inline (wink, wink) can use snort IDS rules to block the packet instead of just sending an alert. It would allow ASL to be a content filtering firewall for those of us in the "ASL hacker" area to hack in a snort Intrusion Prevention System.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 JimmyM over 22 years ago in reply to bergy

The QUEUE action for a iptables rule sends the packet to the userspace where something like Snort-inline (wink, wink) can use snort IDS rules to block the packet instead of just sending an alert. It would allow ASL to be a content filtering firewall for those of us in the "ASL hacker" area to hack in a snort Intrusion Prevention System.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 uncue75 over 22 years ago in reply to JimmyM

I think I read somewhere that QUEUE was experimental??
Cancel
Vote Up 0 Vote Down

Cancel
0 JimmyM over 22 years ago in reply to uncue75

Considered experimental by who? It's been a part of iptables for some time now and works quite nicely. I'm not aware of any security holes it would introduce since it would, at the user's option, replace an "ALLOW" with "QUEUE" to perform further analysis on the packet. I would hope that ASL has experimented with it, since that might suggest they are considering it for incorporation into ASL. I can always hope. [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 uncue75 over 22 years ago in reply to JimmyM

I must have been reading out of date documentation. I did I google search, so it's quite possible. I know it wasn't the actually doc file.
Cancel
Vote Up 0 Vote Down

Cancel
0 jpelzer over 22 years ago in reply to uncue75

Yah, I think it's reasonably stable. Certainly would be a great feature.
Cancel
Vote Up 0 Vote Down

Cancel