by ralph.ronnquist » Thu Apr 30, 2015 1:49 pm
It turned out that it is not sufficient to load the libnetfilter_queue.so dynamic library to get things working. Rather one needs to use the libnetfilter_queue.a static library stub, which apparently offers some hidden magic in addition to loading the dynamic library.
So, I had to make a wrapping dynamic library (nl-nfq.so) that is linked with the static netfilter library, but just "trampolines" all calls. The attached tgz holds the fruits of this in both binary and source forms, since I stopped wrapping when I got it rolling. To build, you'll need make, m4 and gcc.
It's all in pretty raw form at the moment, but evenso, it lets you use newlisp for packet filtering decision logic with iptables through libnetfilter_queue, and do all sorts of useful or fun things.
EDIT: removed the attachment.
Last edited by
ralph.ronnquist on Thu Apr 30, 2015 9:54 pm, edited 1 time in total.