Re: Changing ttl of incoming packets

From: Niki Denev (nike_d_at_cytexbg.com)
Date: 04/23/04

  • Next message: Ryan Sommers: "Method of compiling boot0" 
    To: GiZmen <gizmen@blurp.one.pl>
Date: Fri, 23 Apr 2004 20:17:41 +0300

    GiZmen writes:

    >> yep I'd have to agree with that..
    >> All the needed bits should already be there.
    >>
    >> > > start with natd and chop it until you have what you want..
    >> > >
    >> > ports/net/tcpmssd might be easier to adopt.
    > ---end quoted text---
    >
    > Yes maybe it is good way to do this but what if i do not use ipfw.
    > I am using pf and i do not have IPDIVERT in kernel. Is some kind of packet
    > forward to this daemon will work ?
    >
    > --
    > Best Regards:
    > GiZmen
    >
    > UNIX is user-friendly; it's just picky about its friends
    > UNIX is simple; it just takes a genius to understand its simplicity
    > _______________________________________________
    > freebsd-hackers@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
    > To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"
    >
    >
    >

    in pf you can 'log' the packets that you want to modify, and
    sniff them on pflog0, or maybe even redirect them to localhost(this seems to
    be closer to the IPDIVERT behaviour)

    --niki

  • Next message: Ryan Sommers: "Method of compiling boot0"

    Relevant Pages

    • Question about TCP implementation
      ... I am having trouble with a packeteer and its redirect. ... happens is that when an incomming HTTP command hits the packeteer it ... alters it and turns it into an http redirect. ... packet and then sometimes sends a duplicate ACK to some packet that ...
      (comp.os.linux.misc)
    • Re: (Q) Coming in through a firewall
      ... > local packet sniffing, and they had physical access to the machine anyhow. ... > the start of your main firewall chains to redirect any packet to or from ... > that IP) being redirected through the secondary rule chain. ...
      (comp.os.linux.security)
    • Re: forwarding http requests with ipfw
      ... but then I started to wonder what purpose does ... With the additional option options IPFIREWALL_FORWARD_EXTENDED all safeguards are removed and it also makes it possible to redirect packets destined to locally configured IP addresses. ... Just for kicks I tried a little test to see if the packet was getting handled by the "destination address". ...
      (freebsd-questions)
    • Re: securing Ubuntu and firewall
      ... implement a firewall, it's a packet filter. ... You can also theoretically use iptables to redirect certain ...
      (Ubuntu)