Re: Hack sought

2002-12-03 Thread Doron Shikmoni
Gilad Ben-Yossef wrote: On Tue, 2002-12-03 at 00:52, Doron Shikmoni wrote: Ideally, what I'd like is to have an iptables mangle rule, which will just insert 0 into the CS field of any UDP packet that satisfies some criteria (zero is legit UDP). Can this be done without writing iptables

Re: Hack sought

2002-12-03 Thread Oleg Goldshmidt
Doron Shikmoni [EMAIL PROTECTED] writes: Second, the quickest hack I can think of (save of writing a kernel module or patching the kernel) is to write a small program that captures the packet in user space (opens a raw promiscious socket and listens for it, perhaps by using libpcap to do the

Re: Hack sought

2002-12-03 Thread Gilad Ben-Yossef
On Tue, 2002-12-03 at 14:57, Doron Shikmoni wrote: Sounds like a good plan, which I will try. I was hoping to avoid the coding but it appears as though there's no way around it. Of course there is ;-) if you're willing to invest a little time and effort that is. There exists a wonderful

Re: Hack sought

2002-12-03 Thread Doron Shikmoni
Oleg Goldshmidt wrote: Doron Shikmoni [EMAIL PROTECTED] writes: Second, the quickest hack I can think of (save of writing a kernel module or patching the kernel) is to write a small program that captures the packet in user space (opens a raw promiscious socket and listens for it, perhaps by

Re: Hack sought

2002-12-03 Thread guy keren
On 3 Dec 2002, Oleg Goldshmidt wrote: [..snip..] 1) You'll go to userland for each packet, paying in performance. I don't see how you can send only packets with bad checksum across the border: if you could, you would have a simple solution for your problem, I guess. 2) Libpcap

Hack sought

2002-12-02 Thread Doron Shikmoni
Hi all, I'm having this small but nagging problem and I thought I might find some enlightment here. The essential part of the problem description (you don't want to hear the whole story...) is this: I have a client machine which sends UDP datagrams to a Linux based server. Under some specific

Re: Hack sought

2002-12-02 Thread Gilad Ben-Yossef
On Tue, 2002-12-03 at 00:52, Doron Shikmoni wrote: Ideally, what I'd like is to have an iptables mangle rule, which will just insert 0 into the CS field of any UDP packet that satisfies some criteria (zero is legit UDP). Can this be done without writing iptables extension modules? Or, is