Re: Dabase BAcked IPTables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Jun 28, 2013 at 11:01:10AM -0400, Nick Khamis wrote:
> Is it possible to have a MySQL backed IPTables?

No, network packets need to be handled in real time. Your SQL query 
would take too long.

> What we are trying to accomplish is having our clients supply us 
> with a mac address (or ip), and we would let them through our core 
> network. This would be done automatically on our website i.e.:
> 
> * User logs into the website, and provides mac address
> * We insert the record in the database as an allow rule...

Sounds like a job for ipset(8).

> * Restart iptables?

Restart? What does that mean? iptables is not a daemon.
-- 
  http://rob0.nodns4.us/ -- system administration and consulting
  Offlist GMX mail is seen only if "/dev/rob0" is in the Subject:
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux