> So, talking about the topic - implementing checksum functions on > netfilter_queue, it would be useful to nfq_set_verdict subcall a > function which check if the checksums(tcp, ip, udp, anything else) are > set to 0, and then(if it's 0) it change the ckecksum automatically - > something like the kernel does when we send a packet through a RAW > socket. > > --Bruno Moreira Guedes I think thats a great idea. If the functions were included in the library you could have nfq_set_verdict call them if any of the checksums are set to 0. This would give you the option of either calling the function yourself, or just setting the checksum to 0 then let the nfq_set_verdict call the functions to recalculate them. So maybe it could be implemented like the checksum functions used in the kernel where the base checksum function is the same, but takes parameters to determine what protocol the checksum is being calculated for. Then a wrapper function is made for each protocol type ip, tcp, udp... -Justin. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
