On Wed, May 22, 2002 at 02:56:28PM +0800, Fabrice MARIE wrote:
> Here's a patch from Guilaumme Morin that updates
> my previous 'send icmp unreach* with fake source IP' patch,
> so that on top of being able to specify manually which
> fake source IP should be set on the icmp unreach,
> it is now possible to fake the source IP dynamically
> (using the dest of the original packet as the fake
> source IP), as per explained in this thread :
> http://lists.samba.org/pipermail/netfilter/2002-February/020237.html
> I've reformated the patch so it will apply on the latest CVS tree.

What's the point of putting bogus data out like this?  If your ISP doesn't
suck it'll get dropped anyway by an egress filter.

-- 
Ben Reser <[EMAIL PROTECTED]>
http://ben.reser.org

We tend to see all wars through the lens of the current conflict, and we
mine history for lessons convenient to the present purpose.
- Brian Hayes

Reply via email to