From: "Taylor, Grant" <gtaylor@riverviewtech.net>
To: iptables <netfilter@lists.netfilter.org>
Subject: Re: DROP vs. REJECT...
Date: Fri, 22 Apr 2005 13:54:39 -0500 [thread overview]
Message-ID: <4269486F.2040508@riverviewtech.net> (raw)
In-Reply-To: <426911FC.7060807@riverviewtech.net>
One possible solution to rejecting with the source IP of the "ICMP Host Unreachable" packet being the host that you are trying to hide would be to SNAT the packet as it goes out the system you are trying to hide on it's way back to the original sender. You would want to SNAT the packet to IP of the far side of your upstream router. In doing this you would have to make sure that your upstream router would not block suck packets with any thing like a reverse path filter.
Grant. . . .
prev parent reply other threads:[~2005-04-22 18:54 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-04-22 15:02 DROP vs. REJECT Taylor, Grant
2005-04-22 18:54 ` Taylor, Grant [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4269486F.2040508@riverviewtech.net \
--to=gtaylor@riverviewtech.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.