From: bert hubert <ahu@ds9a.nl>
To: lartc@vger.kernel.org
Subject: Re: [LARTC] Stealth Router
Date: Sat, 24 Mar 2001 21:29:45 +0000 [thread overview]
Message-ID: <marc-lartc-98546951600753@msgid-missing> (raw)
In-Reply-To: <marc-lartc-98545518711220@msgid-missing>
On Sat, Mar 24, 2001 at 06:32:04PM +0100, M.F. PSIkappa wrote:
> Hi,
> in FreeBSD kernel is options that make router stealth, packet passed throw
> router have no change in TTL value.
> Is a posibility to make similar thing in Linux, I think that in traceroute
> isn't this hop, no asteris, no router, no change in TTL, nothing ...?
There are multiple ways to achieve this.
* The Ethernet Frame Diverter which allows you to operate as a transparent
bridge. The URL is in the HOWTO
* The TTL target in iptables. This allows you to raise the TTL again, so
nobody might see your router. If you disallow certain ICMP Port
Unreachable messages, I think your router won't appear in traceroute. You
need to use proxy arp tricks to draw packets into your router if you want
it to be totally transparent.
Regards,
bert
--
http://www.PowerDNS.com Versatile DNS Services
Trilab The Technology People
'SYN! .. SYN|ACK! .. ACK!' - the mating call of the internet
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/
next prev parent reply other threads:[~2001-03-24 21:29 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2001-03-24 17:32 [LARTC] Stealth Router M.F. PSIkappa
2001-03-24 21:29 ` bert hubert [this message]
2001-03-25 19:55 ` bert hubert
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=marc-lartc-98546951600753@msgid-missing \
--to=ahu@ds9a.nl \
--cc=lartc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.