try to change os fingerprint

try to change os fingerprint

[J. Bakshi]

Hello,

I am trying to change the OS fingerprint with iptables. Here are two
rule set which I have constructed to do the same

````````
iptables -t mangle -A PREROUTING - -j PERS --tweak dst --local --conf
example/win9x.conf
iptables -t mangle -A OUTPUT -j PERS --tweak src --local --conf
example/win9x.conf
````````````

But it throws an error like

``````````
iptables v1.4.2-rc1: Unknown arg `--tweak'
Try `iptables -h' or 'iptables --help' for more information.
```````````````

What might be the problem here ?
Thanks

Re: try to change os fingerprint

[John A. Sullivan III]

On Fri, 2009-08-21 at 14:03 +0530, J. Bakshi wrote:
> Hello,
> 
> I am trying to change the OS fingerprint with iptables. Here are two
> rule set which I have constructed to do the same
> 
> ````````
> iptables -t mangle -A PREROUTING - -j PERS --tweak dst --local --conf
> example/win9x.conf
> iptables -t mangle -A OUTPUT -j PERS --tweak src --local --conf
> example/win9x.conf
> ````````````
> 
> But it throws an error like
> 
> ``````````
> iptables v1.4.2-rc1: Unknown arg `--tweak'
> Try `iptables -h' or 'iptables --help' for more information.
> ```````````````
> 
> What might be the problem here ?
> Thanks
<snip>
I'm not familiar with the PERS target.  It does not show up in my
iptables.  Is it available in your kernel or do you need to load and
perhaps compile a module for it? - John
-- 
John A. Sullivan III
Open Source Development Corporation
+1 207-985-7880
jsullivan@opensourcedevel.com

http://www.spiritualoutreach.com
Making Christianity intelligible to secular society

Re: try to change os fingerprint

[J. Bakshi]

John A. Sullivan III wrote:
> On Fri, 2009-08-21 at 14:03 +0530, J. Bakshi wrote:
>   
>> Hello,
>>
>> I am trying to change the OS fingerprint with iptables. Here are two
>> rule set which I have constructed to do the same
>>
>> ````````
>> iptables -t mangle -A PREROUTING - -j PERS --tweak dst --local --conf
>> example/win9x.conf
>> iptables -t mangle -A OUTPUT -j PERS --tweak src --local --conf
>> example/win9x.conf
>> ````````````
>>
>> But it throws an error like
>>
>> ``````````
>> iptables v1.4.2-rc1: Unknown arg `--tweak'
>> Try `iptables -h' or 'iptables --help' for more information.
>> ```````````````
>>
>> What might be the problem here ?
>> Thanks
>>     
> <snip>
> I'm not familiar with the PERS target.  It does not show up in my
> iptables.  Is it available in your kernel or do you need to load and
> perhaps compile a module for it? - John
>   

I am not very sure but maybe we need to patch the kernel. Any clue from
anyone ?

Thanks

Re: try to change os fingerprint

[Richard Horton]

2009/8/21 J. Bakshi <joydeep@infoservices.in>
>
> I am not very sure but maybe we need to patch the kernel. Any clue from
> anyone ?
>
>

The package required to change the IP personality can be found here...
http://ippersonality.sourceforge.net/

Follow their directions and your distributions module build process to
make sure you have the required modules/user space libraries (if
needed) compiled and working.



--
Richard Horton
Users are like a virus: Each causing a thousand tiny crises until the
host finally dies.
http://www.solstans.co.uk - Solstans Japanese Bobtails and Norwegian Forest Cats
http://www.pbase.com/arimus - My online photogallery

Re: try to change os fingerprint

[J. Bakshi]

Richard Horton wrote:
> 2009/8/21 J. Bakshi <joydeep@infoservices.in>
>   
>> I am not very sure but maybe we need to patch the kernel. Any clue from
>> anyone ?
>>
>>
>>     
>
> The package required to change the IP personality can be found here...
> http://ippersonality.sourceforge.net/
>
> Follow their directions and your distributions module build process to
> make sure you have the required modules/user space libraries (if
> needed) compiled and working.
>
>   
Thanks a lot. I'll test in my debian box.