Re: iptables for spoofing

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Le ven 04/04/2003 à 15:19, Julio Cesar Ody a écrit :
> Hello. I'm taking some classes on
> iptables, and I heard it's possible to
> use iptables to spoof outgoing packets
> (or any packet at all).
> So, my question is: How do I do it ?
> How can I alter the source address of
> a given packet using iptables ?

Use SNAT :

	iptables -t nat -A POSTROUTING <packet def.> -j SNAT --to $IP

And you're done.

You should read Filtering and NAT HOWTO on http://www.netfilter.org/.

-- 
Cédric Blancher  <blancher@xxxxxxxxxxxxxxxxxx>
Consultant en sécurité des systèmes et réseaux  - Cartel Sécurité
Tél: +33 (0)1 44 06 97 87 - Fax: +33 (0)1 44 06 97 99
PGP KeyID:157E98EE  FingerPrint:FA62226DA9E72FA8AECAA240008B480E157E98EE



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux