command owner match support
I'm trying to block specific applications through iptables. However I keep getting the following error message: Jan 4 22:44:05 thoript_owner: pid, sid and command matching not supported anymore Is there any way to add this back into the newer kernels or to do this without it?
Quoted 5 lines · Ryan L
I'm trying to block specific applications through iptables. However I keep getting the following error message: Jan 4 22:44:05 thor
ipt_owner: pid, sid and command matching not supported anymore Is there any way to add this back into the newer kernels or to do this without it?
I'm not seeing that message when I try and use --cmd-owner or --pid-owner, I just get "iptables: Invalid argument". However the commands are listed in the output of "iptables --owner --help" for IPTables 1.3.3.
I can only presume that that functionality has silently "gone away". I can't see anything on mailing lists or in the netfilter documentation, are there any references for when this was removed, or why, or what it should be replaced with, if anything?
Signature · 1 line
When the going gets tough, the tough call for close air support.
A message that is not in the archive (sent off-list or not yet received): [email protected]
A message that is not in the archive (sent off-list or not yet received): [email protected]
Quoted 23 lines · Nick Drage
Quoted 6 lines · On Fri, Jan 06, 2006 at 08:02:50 -0600, [email protected] wrote:
Quoted 3 lines · Nick Drage
On Thu, Jan 05, 2006 at 12:56:38 -0600, Ryan L wrote:
Hi,
Quoted 8 lines
I have found nothing about why it was removed or it should be replaced with either. That is the main thing I'm trying to find out. The message you get is the same as what I get when running the command in console. But if you check
/var/log/messagesright afterward, it will show the message I posted. Sorry. I should have clarified that a bit more. Also, I'm using iptables 1.3.4 with a 2.6.14 kernel.
Quoted 8 lines
It's very weird that it's just vanished. Please post me this reply but to the mailing list just so everyone can see it, and then I'll send off an email to the developers, see if we can get a response.
Thanks.
Oh, did you mean like this?
Ok this is how it went in order:
Quoted 5 lines
1) Run: iptables -I OUTPUT -m owner --cmd-owner firefox -j LOG
2) It gives me this message: "iptables: Invalid argument"
3) Check/var/log/messages
4) It shows the following message: "Jan 4 22:44:05 thor >ipt_owner: pid, sid and command matching not supported anymore"
5) I say "WTF!?"