Mr. Harald,
Here is a patchset to add ICMP type-3-code-13 to the REJECT target.
Patches are enclosed and MIME'd. I only made a patch for the IPv4 version,
though; if you want an IPv6 version, I can make that too.
Brad
<snip>
type-3-code-13.patch:
--- ipt_REJECT.c.orig Fri Apr 12 16:43:25 2002
+++ ipt_REJECT.c Fri Apr 12 16:41:51 2002
@@ -310,6 +310,9 @@
case IPT_ICMP_HOST_PROHIBITED:
send_unreach(*pskb, ICMP_HOST_ANO, reject->fake_source_address);
break;
+ case IPT_ICMP_ADMIN_PROHIBITED:
+ send_unreach(*pskb, ICMP_PKT_FILTERED, reject->fake_source_address);
+ break;
case IPT_TCP_RESET:
send_reset(*pskb, hooknum == NF_IP_LOCAL_IN);
case IPT_ICMP_ECHOREPLY:
type-3-code-13.patch.2:
--- libipt_REJECT.c.orig Fri Apr 12 16:37:44 2002
+++ libipt_REJECT.c Fri Apr 12 16:36:38 2002
@@ -41,6 +41,8 @@
IPT_ICMP_NET_PROHIBITED, "ICMP network prohibited"},
{"icmp-host-prohibited", "host-prohib",
IPT_ICMP_HOST_PROHIBITED, "ICMP host prohibited"},
+ {"icmp-admin-prohibited", "admin-prohib",
+ IPT_ICMP_ADMIN_PROHIBITED, "ICMP dest. unreachable: admin filtered"},
{"tcp-reset", "tcp-reset",
IPT_TCP_RESET, "TCP RST packet"}
};
type-3-code-13.patch.3:
--- ipt_REJECT.h.orig Fri Apr 12 16:44:37 2002
+++ ipt_REJECT.h Fri Apr 12 16:44:28 2002
@@ -9,6 +9,7 @@
IPT_ICMP_ECHOREPLY,
IPT_ICMP_NET_PROHIBITED,
IPT_ICMP_HOST_PROHIBITED,
+ IPT_ICMP_ADMIN_PROHIBITED,
IPT_TCP_RESET
};
</snip>
=====
Brad Chapman
Permanent e-mail: [EMAIL PROTECTED]
Current e-mail: [EMAIL PROTECTED]
Alternate e-mail: [EMAIL PROTECTED]
__________________________________________________
Do You Yahoo!?
Yahoo! Tax Center - online filing with TurboTax
http://taxes.yahoo.com/
type-3-code-13.patch
Description: type-3-code-13.patch
type-3-code-13.patch.2
Description: type-3-code-13.patch.2
type-3-code-13.patch.3
Description: type-3-code-13.patch.3
