Aaaah, so it does.  Didn't even think of that.  Thank you very much,
sorry for the silly question.

-Titus Winters

On Wed, 2002-02-20 at 12:49, Henrik Nordstrom wrote:
> See for example the REJECT target.  It does exacly what you are 
> looking for.
> 
> Regards
> Henrik Nordström
> 
> On Wednesday 20 February 2002 18:55, Titus D. Winters wrote:
> > I have an odd sort of question: How would I go about writing an
> > extension that would cause nf to send a response packet
> > (constructed by the extension, of course) to input that Linux
> > normally wouldn't?  (For example, sending a response to a FIN probe
> > of an open TCP port.)  Would mangling the incoming packet (swapping
> > ip.src and ip.dst) work?  Can I even perform a mangle in
> > prerouting?  (I just tried to write an extension that swapped
> > ip.src and ip.dst but "iptables -t mangle -A PREROUTING -j" and any
> > target seems to return "Invalid Argument")
> >
> > Thanks
> > -Titus Winters



Reply via email to