Key Pages: [ Rope Home Page | Basics (tutorial) | Language Reference | Download ]

ROPE Language Reference - "hotdrop"

The "hotdrop" action terminates the calling script and causes IpTables to DROP the packet being inspected, regardless of the actions configured to the IpTables rule that invoked the ROPE script.

This is intended for use in situation where a ROPE script has detected a serious error that means that packet checking cannot continue, and so there is significant doubt about the intended target for the packet and the only reasonable choice is to discard it completly.

If "hotdrop" is passed a string using AnchorBrackets, then that string is printed (in UserLand) or written to syslog in KernelLand.

This action should be used very rarely.

For example..

if( $d 0 ne { hotdrop( "Division by zero" ) } )

Note: "hotdrop" terminates the script, even if called within an eval block.

ROPE Language Reference - "hotdrop"

See Also