Re: [PHP-DEV] New extension: netfilter/iptables

>
>
>>> Can i code a netfilter extension for PHP or don't you guys see the need
>>> for it ?
>>> It could result in some great firewall frontends in PHP
>>>   
>>
>>
>> Go for it.  Assuming the netfilter library is not under the GPL.  
>> LGPL is
>> fine.
>>
>> -Rasmus
>>
>>  
>>
> It's under GPL, i'll email their core team and ask if they'll consider 
> LGPL
>
> !Exclude Disclaimer!
>
Well they said no to LGPL. So that leaves the option of writing a lib to 
connect to netfilter via sockets, problem is that it uses RAW IP sockets 
which requires root access. I've searched the mailing lists and docs for 
setuid/suexec and found the posix_setuid() function, should i leave it 
up to the user to run posix_setuid() or set User/Group from httpd.conf 
in order to be able to use this new netfilter extension ?

- Corne'