Re: Changing packets ttl's

From: GiZmen (gizmen_at_zion.vsip.pl)
Date: 04/28/05

  • Next message: Claudio Jeker: "Re: if_tap unaligned access problem" 
    Date: Thu, 28 Apr 2005 12:39:31 -0700
To: freebsd-net@freebsd.org

    > Do you mean the sysctl net.inet.ip.ttl?
    >
    > ~Neo-Vortex

    No this sysctl is not what i want.
    I need to change ttl of outgoing packets to my internal network.
    For example. There is connection from host on internet.
    it has for example 10 hops to my gateway. And when packet comes
    to my box it has for example 55 ttl in ip header.
    And then it is routed to host in my network so my box change ttl
    to 54. But what i need is change ttl to '1'.

    >
    > On Wed, 27 Apr 2005, GiZmen wrote:
    >
    > > Hi,
    > >
    > > I am searching how to change packet ttl. I am runing a freebsd 5.4
    > > gateway and i would like to change ttl of any packets that are
    > > going out from my internal interface. My goal is to change ttl to 1
    > > so the last hop is the next host in my internal network.
    > > I want to prevent people to do small NAT in my network. I know that
    > > changing ttl's is easy to bypass but not for normal user :)
    > > I am using pf as my packet filter but there is no option to change
    > > ttls to smaler value. Please help me with this problem.
    > > Big thanks
    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

  • Next message: Claudio Jeker: "Re: if_tap unaligned access problem"

    Relevant Pages

    • Re: Cant use internal network after dialup modem is used -- FOLLOWUP: better output
      ... Here is a corrected/improved version with more useful indenting. ... Just after reboot, can use internal network. ... In particular, during and after use of dialup modem, ping gives: ... packets transmitted, 4 packets received, 0% packet loss ...
      (comp.os.linux.setup)
    • Re: Iptables or misconfiguration?
      ... > I'm building up a router with IPTABLES. ... > communicates with the machines on the internal network, ... These addresses should never appear as sources on any packets you receive ... to attack others. ...
      (comp.unix.admin)
    • Re: Odd windows ICMP... any ideas what this is?
      ... > Our IDS has been reporting some large ICMP packets on ... > our internal network. ... Apparently w32 boxes ping their domain controller regularly. ... profiling the ICMP traffic immediately afterwards would help to provide ...
      (Incidents)
    • Re: IPFilter/IPNat and rdr
      ... but the next rule overrides lets the packet in IF it is ... You may or may not want the quick keyword in that second rule, ... > rule to prevent packets from the outside that contain a destination IP ... > on my internal network from passing through my firewall and entering my ...
      (FreeBSD-Security)
    • IPFW questions
      ... I'm in the process of reviewing my IPFW firewall rules since they've ... bdg_forward packets. ... that when a machine on my internal network transmits a packet that is ...
      (comp.unix.bsd.freebsd.misc)