On Sun, 23 Apr 2006, Török Edwin wrote: > > This could be done with nfqueue, modular policy and a pretty simple tool. > How do I determine if the policy needs to be changed? I.e. how do I determine > if the packet would be dropped? You say packets are silently dropped, won't > they generate an avc denied at least? (at least the first time?)
Actually, yes, you'll get avc messages. -- James Morris <[EMAIL PROTECTED]>
