Re: SNAT spoofing problem

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



That's true but I thought that the SNAT would re-write the outgoing ICMP packet so that its source address is 192.168.1.1 instead of 192.168.1.2 -- thus making it look to the receiver as if it had come from the gateway instead of the stealth host. The gateway itself is not involved except for being an existing host on the same subnet.

Do I need to do this some other way?

Gary

Gáspár Lajos wrote:
Gary Renshaw írta:

It looks like the SNAT is doing nothing at all.  What am I missing?
You are in one subnet.... NO PACKET GOES THROUGH your gateway...

Thanks,
Gary

--
==============================================
Trilunar Consulting    http://www.trilunar.ca/
==============================================
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux