On Fri, Sep 17, 2010 at 8:07 PM, Eric Dumazet <eric.dumazet@xxxxxxxxx> wrote: > Le vendredi 17 septembre 2010 à 20:01 +0200, Nicola Padovano a écrit : >> > if you say now : >> > >> > Send a packet to google, please, I dont care of what source address you >> > chose, but I am interested to receive an answer, of course. (application >> > does not use bind() system call, only a send()) >> >> why an application that wants to send a packet to google would send it >> with a different source ip of the host in which it resides? >> ie. an application is on a machine which ip is: 192.168.0.2 and the >> machine has only one ip address... >> > > I dont understand the question or the problem. > > If you look closer, you can see your machine has at least two addresses. ok, let's try in this way. the code is this: [CODE] if (hooknumber == NF_INET_LOCAL_IN) fl.nl_u.ip4_u.saddr = niph->saddr; //niph is the pointer to ip header of the packet to send if (hooknumber == NF_INET_FORWARD) fl.nl_u.ip4_u.saddr = 0; [/CODE] so, i don't understand why saddr = 0 when the hooknumber is NF_INET_FORWARD.... this is the real problem. -- Nicola Padovano e-mail: nicola.padovano@xxxxxxxxx web: http://npadovano.altervista.org -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html