I want to block specific UDP packet OUTGOING from my machine using iptables. Packet has a string in “hex in RAW”(?) i want to check packet by it.
Like: If UDP packet hex RAW match “test_text” – block it.
i have something like this
iptables -A OUTPUT -p udp -m multiport --sports 8000 -m string --algo bm --string "test" -j DROP
but it gives error
iptables: No chain/target/match by that name.
There is a “string” match netfilter extension, that might or might not be compiled in/available as a module on your system.
Do not forget that such things can inherently have a serious performance impact, especially if more packets than necessary are subjected to that match.
No related posts.