"Judging Them Little Buggers"

• To tell the kernel what to do with a packet, we need to give verdict:

  • int rc = ipq_set_verdict(h, msg->packet_id, NF_ACCEPT, 0, NULL);

    The '0' and 'NULL' mean "forward the original packet, I'm not supplying a replacement payload".
• Possible verdicts:
  1. NF_ACCEPT - allow the packet to continue its route.
  2. NF_DROP - drop the packet (without telling anyone, shh!).

Originally written by guy keren