Hi Peter and Steffen, thanks for your response... >> What is the right layer/function to realize this? >Sounds similar to pcmcia cardmanager... >Perhaps you'd have a low-level "big brother" module watching the port >and triggering [un]loading of other modules. >How do you realize that the plug has been connected? I use the kernel timer for polling the parallelport once per second. I can't use interrupts because the plug is not connected to ACK :-( > >> from the hardware. Should I block the transmit and receive functions >> in the networking layer? Or is there a simple way to do this. >remove the outgoing route(s) only ? I can't solve this with userspace utils because it should be a firewall feature. The attacker should't have an option to reactivate the network connection while the plug is connected. As I sad "like a disconnected network cable" regards Frank -- _/_/_/_/ _// _/ Frank Neuber _/ _/_/ _/ frank.neuber@gmx.de (private) _/_/_/ _/ _/ _/ _/ _/ _/_/ neuber@opensource-systemberatung.de _/ _/ // http://www.opensource-systemberatung.de - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org