From mboxrd@z Thu Jan 1 00:00:00 1970 From: I.S.Kuten Subject: Re: fake ping reply Date: Thu, 4 Sep 2003 20:10:00 +0300 Sender: netfilter-admin@lists.netfilter.org Message-ID: <20030904201000.40c0e6a4.i.kuten@sam-solutions.net> References: <20030902165026.2edc8dfd.i.kuten@sam-solutions.net> <20030904162444.GB31513@cannon.eng.us.uu.net> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <20030904162444.GB31513@cannon.eng.us.uu.net> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org On Thu, 4 Sep 2003 12:24:44 -0400 Ramin Dousti wrote: > On Tue, Sep 02, 2003 at 04:50:26PM +0300, I.S.Kuten wrote: > > > Hello , > > > > i wanted to setup iptables , when someone pings my box , echo-reply > > would come from other machine then mine . > > A very strange question. When the client sends you a echo-request, it > expects to receive echo-reply from the same IP address. If some other > IP address sends the echo-reply, it will simply get dropped by the OS > on the client, as there is no match for this bogus packet... > > Now, what do you want to achieve with this? Fool the client that his > ping, pinged someone else?? > I'd like to archive when i receive ping from say 192.168.0.1 , i send ping to another ip 192.168.0.2 receive echo-reply and send echo-reply back to 192.168.0.1 with same type (ping i mean icmp with some type) sorry > > i wanted to setup iptables , when someone pings my box , echo-reply > > would come from other machine then mine . this is not quite correct what i wanted > If you feel unconfortable with someone pinging you, just drop them... > > Ramin > > > > > I've tried to play with PREROUTING & POSTROUTING chains but had no success . > > > > Anyone has solution ? > > > > >