Re: clone packet with new destination address

[Stephen Clark <sclark46@earthlink.net>]

On 11/01/2010 09:09 AM, Jan Engelhardt wrote:
> On Monday 2010-11-01 13:46, Stephen Clark wrote:
>    
>>> Oh, iptables can also do it. Please see iptables target TEE and
>>> RAWNAT in xtables-addons. http://xtables-addons.sourceforge.net/
>>>        
>> In testing this it looks like, to me anyhow, that the cloned packet
>> gets sent to the new gw with the original destination address, so
>> now the destination address has to get fixed up on the gw, this
>> seems pretty kludgy to me. Why can't the cloned packet simply have
>> its destination address replaced with the new destination address?
>>      
> Because that would incur a loss of information (namely, the
> destination address).
>
>    
>> This seems to me like it would make a lot more sense, instead of
>> having to make changes to the packet on two different systems.
>>      
> You can do the changes on a single machine if you want to.
>
>    
I am not sure on how to go about doing that, looking at the code for TEE 
it looks
like the cloned packet bypasses any of the remaining iptables chains. So 
where
would I change the destination address? Also if I am mistaken and it 
does hit
one of the remaining iptables chains how do I tell it is not the 
original but the
cloned packet I want to change to the new destination address?

Anyway thanks for your response.

-- 

"They that give up essential liberty to obtain temporary safety,
deserve neither liberty nor safety."  (Ben Franklin)

"The course of history shows that as a government grows, liberty
decreases."  (Thomas Jefferson)