search

OpenInternet / copilot

An easy to use censorship simulating access point in a box
https://openinternet.github.io/copilot/
GNU Lesser General Public License v3.0
26 stars 2 forks source link

Trainer Interface profile to IP-tables translation must be logical for the user #9

Closed seamustuohy closed 9 years ago

seamustuohy commented 9 years ago

In netfilter, If a chain doesn't decide the fate of the packet, then once traversal on that chain has finished, traversal resumes on the next rule in the current chain. This means that the first rule that blocks, discards, or forwards a packet on will be carried out without concern for any later rules. The Co-pilot interface must make sure that the interface provides a logical way to prevent incompatible rule sets that may cause inconsistent behavior.

seamustuohy commented 9 years ago

Netfilter usage has become minor because we are building off of existing open source tools and libraries with a higher level functionality.