Lowth: IpTables ROPE: Basics

[ Thanks to Chris Lowth for this link. ]

"ROPE is a scriptable IpTables match module, used to descide whether IP packets passed to it match a particular set of criteria or not. It started life as a project to make the "string" match module of IpTables stronger (Rope is strong string) and evolved fairly quickly into the open-ended matching module we have here today.

"The match modules of iptables allow rules to take actions depending on whether packets match certain criteria or not. The standard distribution of netfilter / IpTables provides a range of useful modules of this type..."

Complete Story

Related Stories:

• SearchEnterpriseLinux: Why Snort, Nessus, OSS Build Secure IT Fortresses, Part 1(Oct 15, 2004)
• Linux Journal: ipfilter on GNU/Linux: Is It Finally Here?(Jun 01, 2004)