Re: fake ping reply

[I.S.Kuten <i.kuten@sam-solutions.net>]

On Thu, 4 Sep 2003 12:24:44 -0400
Ramin Dousti <ramin@cannon.eng.us.uu.net> wrote:

> On Tue, Sep 02, 2003 at 04:50:26PM +0300, I.S.Kuten wrote:
> 
> > Hello ,
> > 
> > i wanted to setup iptables , when someone pings my box , echo-reply
> > would come from other machine then mine .
> 
> A very strange question. When the client sends you a echo-request, it
> expects to receive echo-reply from the same IP address. If some other
> IP address sends the echo-reply, it will simply get dropped by the OS
> on the client, as there is no match for this bogus packet...
> 
> Now, what do you want to achieve with this? Fool the client that his
> ping, pinged someone else??
> 

I'd like to archive 

when i receive ping from say 192.168.0.1 , i send ping to another ip 192.168.0.2 receive echo-reply 
and send echo-reply back to 192.168.0.1 with same type
(ping i mean icmp with some type)



sorry 
> > i wanted to setup iptables , when someone pings my box , echo-reply
> > would come from other machine then mine .
this is not quite correct what i wanted


> If you feel unconfortable with someone pinging you, just drop them...
> 
> Ramin
> 

> > 
> > I've tried to play with PREROUTING & POSTROUTING chains but had no success .
> > 
> > Anyone has solution ?
> > 
> > 
>