On Tuesday 20 April 2004 7:22 pm, Christian Riechmann wrote: > Hello, > > is it possible to read - via ipq_read/ipq_get_packet - a UDP packetr > and after some changes to accept - via ipq_set_verdict with NF_ACCEPT and > shorter length - it as a TCP packet? My immediate response to this is "no, of course not, because UDP and TCP packet headers are completely different". I mean, UDP packets just get sent - who knows whether the receiver gets them or not? TCP involves a three-way handshake to set up a connection, and then sequence & acknowledgement numbers to maintain the reliability. Creating that out of nowhere would be difficult. > Here is what I wish to do: > For the transmission of IP packets (UDP, ICMP, TCP) between two hosts > I want to send these packets through a UDP tunnel. Tunnelling is a very different matter from converting UDP packets into TCP packets, and should be eminently feasible. http://vtun.sourceforge.net will provide you a general-purpose tunnel which operates over UDP. See if that does what you need - it'll probably simplify what you've been attempting to do with netfilter considerably. Regards, Antony. -- "640 kilobytes (of RAM) should be enough for anybody." - Bill Gates Please reply to the list; please don't CC me.