Can i code a netfilter extension for PHP or don't you guys see the need
for it ?
It could result in some great firewall frontends in PHP
Go for it. Assuming the netfilter library is not under the GPL. LGPL is
fine.
-Rasmus
It's under GPL, i'll email their core team and ask if they'll consider LGPL
!Exclude Disclaimer!
Well they said no to LGPL. So that leaves the option of writing a lib to connect to netfilter via sockets, problem is that it uses RAW IP sockets which requires root access. I've searched the mailing lists and docs for setuid/suexec and found the posix_setuid() function, should i leave it up to the user to run posix_setuid() or set User/Group from httpd.conf in order to be able to use this new netfilter extension ?