ircop / nfq_filter Goto Github PK

iptables -A PREROUTING -s x.x.x.x/y -p tcp -m tcp --dport 80 -j NFQUEUE --queue-num 0 --queue-bypass

iptables default table "filter" has no PREROUTING chain, so may be we should add "-t mangle"?

При выполнении cmake ../ выпадает с ошибкой:

-- Looking for include file libnetfilter_queue/libnetfilter_queue.h
-- Looking for include file libnetfilter_queue/libnetfilter_queue.h - not found
CMake Error at CMakeLists.txt:26 (message):
  libnetfilter_queue.h not found!

Фикс:

diff --git a/CMakeLists.txt b/CMakeLists.txt
index d398844..6514630 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -16,6 +16,11 @@ endif()

 # check libnetfilter headers
 INCLUDE(CheckIncludeFiles)
+CHECK_INCLUDE_FILES (stdint.h HAVE_STDINT_H)
+IF(HAVE_STDINT_H)
+    SET(CMAKE_REQUIRED_FLAGS "-include stdint.h")
+ENDIF(HAVE_STDINT_H)
+
 CHECK_INCLUDE_FILES("libnetfilter_queue/libnetfilter_queue.h" HAVE_NFQUEUE_H)
 if(NOT HAVE_NFQUEUE_H)
        message( FATAL_ERROR "libnetfilter_queue.h not found!" )

hello!

subj, kernel is 3.5.0-51-generic, libnetfilter-queue1 0.0.17-1, ubuntu 12.10

worked pretty well for straight 5-6 days, and then it suddenly stops after re-reading conf files, happened two times in a past weeks

debug level 3:

29.09.2014 18:09:04: Packet NOT filtered: x.x.x.x:49957 -> 64.233.165.199:80, Header: AP** Seq: 0xe986eb14 Ack: 0xe9a03c06 Win: 0xfec6 TcpLen: 20

Host: www.youtube.com :: URL: www.youtube.com/gen_204?tlt=151&action=webp_stats&webp_enabled=true&webp_default=9&jpg_default=1
29.09.2014 18:09:05: Packet NOT filtered: x.x.x.x:51830 -> 64.233.165.199:80, Header: AP** Seq: 0x150680c8 Ack: 0x4a55d340 Win: 0xfd TcpLen: 20

Host: www.youtube.com :: URL: www.youtube.com/api_video_info?el=embedded&hl=en_US&height=350&sts=16334&eurl=http%3A%2F%2Fpost.rmbn.net%2Fcgi-bin%2Fmain.fcgi%3Fplace_id%3D1884%260.3612376458477229&ei=62cpVMqQMoLCwwPq5IHgCw&splay=1&width=400&ps=chromeless&video_id=FyFq1B86FsQ&loop=1&asv=3
29.09.2014 18:09:05: - Re-reading domains and urls files...
29.09.2014 18:10:42: Parent memory usage: 140736019103920
29.09.2014 18:12:22: Parent memory usage: 140736019103920
29.09.2014 18:14:02: Parent memory usage: 140736019103920

hello there!

it seems like debug levels 2,3,4 adding no info to logfile, just the same stats as level 1

and debug_ip_file is empty too, iptables match packets by source and i'm sure that debug_from_ip is equal ip i'm matching packets from