Java bindings for IPTABLES

[Krashan]

Hello!

I guess this is more javish than linuxish question... I'm looking for
(preferably JNI) bindings to linux' IPTABLES. I need to
create/review/update/delete firewall rules from Java.

One thing I can do now is to call 'iptables' command and parse
results, but this is painfully slow.

Is there any project available over there or must I sit on my a** and
write one myself? I guess this would be a great experience to do that -
but might be a bit beyond my reach (read - knowledge)... Google
unfortunately gave nothing...

Best regards,
Pawel Kraszewski

 

[Krashan]

Hello!

I guess this is more javish than linuxish question... I'm looking for
(preferably JNI) bindings to linux' NetFilter. I need to
create/review/update/delete firewall rules from Java.

One thing I can do now is to call 'iptables' command and parse
results, but this is painfully slow.

As I understand, 'NetFilter' is the kernel part I want to talk to,
'iptables' is an example of userspace program to do that from command
line.

Is there any project available over there or must I sit on my a** and
write one myself? I guess this would be a great experience to do that -
but might be a bit beyond my reach (read - knowledge)... Google
unfortunately gave nothing...

Best regards,
Pawel Kraszewski

 

[Juri Kuehn]

Hello!

I guess this is more javish than linuxish question... I'm looking for
(preferably JNI) bindings to linux' NetFilter. I need to
create/review/update/delete firewall rules from Java.

One thing I can do now is to call 'iptables' command and parse
results, but this is painfully slow.

As I understand, 'NetFilter' is the kernel part I want to talk to,
'iptables' is an example of userspace program to do that from command
line.

Is there any project available over there or must I sit on my a** and
write one myself? I guess this would be a great experience to do that -
but might be a bit beyond my reach (read - knowledge)... Google
unfortunately gave nothing...

Best regards,
Pawel Kraszewski

Hi,
maybe try working with rulesets for iptables. They're also easy to parse
and aren't "painfully slow".
http://www.faqs.org/docs/iptables/saveandrestore.html

Greetings,
Juri

 

[Pawel Kraszewski]

maybe try working with rulesets for iptables. They're also easy to parse
and aren't "painfully slow".
http://www.faqs.org/docs/iptables/saveandrestore.html

Nope... I need to generate rules on-the-fly (worse, also rules tor TC) from
database. I would like to make purely java-controlled router with bandwidth
control. And all this will be (well, would be nice to be) controlled via
XML-RPC