Re: [patch] REJECT incorrectly inherits the current nfmark to the generated RST packet

On Thu, Jun 13, 2002 at 07:31:23PM +0200, Henrik Nordstrom wrote: > I have a smal patch not yet sent.. > > REJECT incorrecly inherits the current nfmark to the generated packet, > inhibiting mangle from rerouting the generated RST packet correcly if > attempting to set the same mark as the orig

netfilter on solaris?

Hi, It is a strange idea I know, but I'd be interested in what the opinion of the core netfilter developers is on porting the whole netfilter subsystem to Solaris? Apart from the technical issues, would there be any problems? Does the GPL allow this kind of usage? (it would be implemented as a m

Any example ...

HI ! I gonna make some prog using libiptc wishing to interact with netfilter thru dedicated API , but ... having no notion what specific flags to set with [ set | get ]sockopt () .Would you help me with this kind of info - either as a small code example or as explanation (

Re: netfilter on solaris?

On Fri, 14 Jun 2002, Balazs Scheidler wrote: > It is a strange idea I know, but I'd be interested in what the opinion of > the core netfilter developers is on porting the whole netfilter subsystem to > Solaris? You must have plenty of time. I envy you! :-) > Apart from the technical issues, wou

Re: netfilter on solaris?

On Fri, Jun 14, 2002 at 12:32:55PM +0200, Jozsef Kadlecsik wrote: > On Fri, 14 Jun 2002, Balazs Scheidler wrote: > > > It is a strange idea I know, but I'd be interested in what the opinion of > > the core netfilter developers is on porting the whole netfilter subsystem to > > Solaris? > > You m

Re: problem with libipq and userprocess and 'clean' exit

James Morris schrieb: >Nothing to worry about, there is currentl no way for the ip_queue module >to know that the user process has exited (unless another process starts >using the queue). > >The kernel module also ensures that all packets are fed back into the >stack, no matter what the usersp

TCP/IP checksums and changing destination address

I'm currently writing a netfilter module to modify some options in TCP packets. Currently, I'm just trying to learn a bit about it so I've written a module that 1) Sets the PSH flag in all TCP packets and 2) Modifies the destination address to be the source address. I wrote a small function that

[libipq] Buffer size

Hi... I am currently using iptables (1.2.5) and libipq to develop a user program (using the QUEUE target) that would introduce an extra delay for packets going through a bridge (bridge-utils-0.9.5). While using ping, the program works fine. But when i test it with Microsoft Netmeeting to t

[libipq] Buffer size

On Fri, 14 Jun 2002 eem1wc wrote > [1] how big is this buffer? > [2] how can i go about to solve this problem? I typically need to introduce a > round-trip delay of 500ms (i.e. 250ms from src to dest through the bridge)? > [3] can i do anything to enlarge this buffer? Have a look at : 'L

[PATCH] -M option unusable

Hello, This is just a small patch, guess the --modprobe option is not very popular :) It's vs the CVS userspace iptables.c file. --- iptables.c.old Sat Jun 15 00:06:12 2002 +++ iptables.c Sat Jun 15 00:06:04 2002 @@ -1682,7 +1682,7 @@ opterr = 0; while ((c = getopt_long(ar

Re: [libipq] Buffer size

On Fri, 14 Jun 2002 [EMAIL PROTECTED] wrote: > Hi... > >I am currently using iptables (1.2.5) and libipq to develop a user program > (using the QUEUE target) that would introduce an extra delay for packets going > through a bridge (bridge-utils-0.9.5). While using ping, the program works