Re: Any way to automatically change arbitrary headers of IP packets on-the-fly?

From: Lynx (lynx@enemy.org)
Date: Wed Apr 13 2005 - 04:15:29 EDT


On Apr 12, 2005 at 1517 -0300, JoĆ£o Paulo Caldas Campello appeared and said:
> [...]
> Does anybody know any userland tool, Linux kernel module,
> iptables/netfilter module, or whatever mechanism to change arbitrary
> headers of IP packets on-the-fly as long as they traverse the IP
> stack? Is there any known paper regarding this subject?
> [...]
> I thought it could be done in the "MANGLE" table
> of netfilter, but I found no TARGET that achieves that nor any
> documentation about altering arbitrary IP headers.

Did you check out the QUEUE option and the libipq API? With libipq you
can inspect packets traversing the filter and change metadata or packet
information.

Cheers,
Lynx.



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:19 EDT