hi, everyone! Recently my boss gave me a project,the goal of the project is to develop an additional part of the IP stack, which will mark up IP packets according to some criteria (destination address, application, etc...) and will lead the marked up IP packets to Elysean's interconnection network by way of a well identified BGP router.You can encapsulate the packet with IPIP,GRE or LSR. The destaddr,router addr and mode(IPIP or GRE or LSR) is in the configuration file. I know Linux has implemented the tunnel, with ifconfig you can control it, but my boss ask me to encapsulate the packet according to the port, I can't handle it with ifconfig. And I have a question: how do the packets flow over the IP layer? Can I get and modify it in ipip tunnel? I ever think about the firewall interface , can i write a firewall module to get and modify and forward the packet? Is there something i have to notice? Hope to help me , i'm almost crazy!!!! __________________________________________________ Do You Yahoo!? Yahoo! Photos - Share your holiday photos online! http://photos.yahoo.com/ - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org