From: Tobias DiPasquale <codeslinger@gmail.com>
To: Quinton Hoole <quinton@hoole.biz>
Cc: netfilter@lists.netfilter.org
Subject: Re: Mangling IP Options fields
Date: Mon, 16 May 2005 08:38:07 -0400 [thread overview]
Message-ID: <876ef97a05051605385987cc50@mail.gmail.com> (raw)
In-Reply-To: <42889068.4010307@hoole.biz>
On 5/16/05, Quinton Hoole <quinton@hoole.biz> wrote:
> This newbie needs to add and/or rewrite data in the IP Options fields.
> The MANGLE chain looks like the place to do this, but I don't see the
> appropriate target extensions to achieve it. It seems easy to mangle
> most other fields (DSCP, ECN, TOS, TTL etc) but no mention of the
> OPTIONS fields.
>
> Is mangling of IP options fields supported by netfilter/iptables?
Which IP options are you looking to be able to mangle? If you just
need to be able to mangle the MSS, then check out the TCPMSS target
included in the vanilla Linux kernel. This would also be a good place
to start if you need to create an iptables target that mangles an IP
option of another type. You might also check out the IPV4OPTSSTRIP
target in patch-o-matic (http://svn.netfilter.org), but I don't know
how much utility this will have for you.
--
[ Tobias DiPasquale ]
0x636f6465736c696e67657240676d61696c2e636f6d
next prev parent reply other threads:[~2005-05-16 12:38 UTC|newest]
Thread overview: 13+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-05-16 12:22 Mangling IP Options fields Quinton Hoole
2005-05-16 12:38 ` Tobias DiPasquale [this message]
2005-05-16 12:58 ` Quinton Hoole
2005-05-16 15:58 ` Frank Abel
2005-05-16 13:18 ` Quinton Hoole
2005-05-16 13:35 ` Tobias DiPasquale
2005-05-16 14:38 ` Quinton Hoole
-- strict thread matches above, loose matches on Subject: below --
2005-05-16 12:38 Quinton Hoole
2005-05-16 18:43 ` Jonas Berlin
2005-05-19 12:58 ` Quinton Hoole
2005-05-20 11:17 ` Amin Azez
2005-05-20 13:47 ` Quinton Hoole
2005-06-04 9:23 ` Jonas Berlin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=876ef97a05051605385987cc50@mail.gmail.com \
--to=codeslinger@gmail.com \
--cc=netfilter@lists.netfilter.org \
--cc=quinton@hoole.biz \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.