Hi,
Thank you for your reply.
As per your advice, I call ip_rcv_finish (referenced by the argument
okfn) in my NF_IP_PRE_ROUTING hook function. But I got segmentation
fault. Could you explain in a little more detail what should I do or
what was the problem with the above method? I'm a newbie in netfilter
and linux kernel programming.
Thanks a lot.
从: Jan Engelhardt <jengelh@xxxxxxxxxx>
主题: Re: NF_STOLEN
>
> On Friday 2008-11-21 03:17, 赵磊 wrote:
>
> >Hi,
> >
> >I register a NF_IP_PRE_ROUTING hook that check the incoming
> packets. I’m
> >trying to return NF_STOLEN on particular TCP packets and later
> pass them
> >to the TCP module of the kernel. Any advice about how this can be
> achieved?
>
> PREROUTING is invoked from here:
>
> net/ipv4/ip_input.c:
> return NF_HOOK(NFPROTO_IPV4, NF_INET_PRE_ROUTING, skb, dev,
> NULL,
> ip_rcv_finish);
> or here, net/ipv6/ip6_input.c:
> return NF_HOOK(NFPROTO_IPV6, NF_INET_PRE_ROUTING, skb, dev,
> NULL,
> ip6_rcv_finish);
> (or whichever other protocol you use)
> So you just call the appropriate functions (ip{,6}_rcv_finish).
>
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
