> I'm new to kernel hacking, but not to linux. I personally feel linux
> kernels could be much improved, i would like to do so, but i am not
> exactly any good at .c programming.
Go ahead and hack the kernel, and you will be :-)
> version that has many networking options, such as improved logging,
> better protect again certain denial of service attacks. (yes i know
> about ipfwadm, but i dont like using it). Also, about ipfwadm, i think
> linux kernel's should come with their own ipfwadm type program, cept
> its much easier to use. I'd prefer having a /etc/packet.deny file
> kinda like login.access, like: <+/->:<icmp/udp/tcp/ALL/etc>:<ip
> address/ALL>:<port/ALL> .
Here's what you do: write a utility that reads the /etc/packet.deny
file, and translate it into ipfwadm commands. No need to change the
kernel.
~kzm
-- If I haven't seen further, it is by standing in the footprints of giants