How to hide a NAT router?

How to hide a NAT router?

[Artūras Šlajus]

Hello,

I've stepped on this mail in list:
http://lists.netfilter.org/pipermail/netfilter/2004-November/056947.html

But I still haven't found any solutions for these two problems:

the second method, sterilizing IP
header information and stripping unneeded TCP flags would successfully
undermine this scheme. For the last Method, counting hosts behind a
router.
Striping the fragmentation flag for syn packets, and setting the IP ID to
'0', (like Linux and Free BSD both do) would make it impossible to count
hosts behind a NAT router.

Any ideas how to do that on 2.6 and latest netfilter?
-- 
Pagarbiai,
Artūras Šlajus
--
Skype: arturaz_
ICQ: 157929934
Jabber: arturaz@akl.lt
IRC: arturaz @ irc.data.lt, irc.freenode.net, irc.lcirc.net

Re: How to hide a NAT router?

[Taylor, Grant]

Artūras Šlajus wrote:
> Any ideas how to do that on 2.6 and latest netfilter?

It looks as if the project is fairly well dead.  I did some quick sleuthing and found that there is a little bit of information in the mailing list for the project and you can still download patches from the BitKeeper repository for the project.  2.4.21 was the most recent kernel that I saw referenced mid '03.

Here are some URLs you may want to go through:

http://ippersonality.sourceforge.net/
http://linux-cd.bkbits.net/
http://linux-cd.bkbits.net:8080/linux-2.4-ippersonality/cset@3deb9cf5k3AY4rHNAB5Vcyg6--jQOQ?nav=index.html|ChangeSet
(TinyURL of the above "http://tinyurl.com/yk3d9a")

It looked like the mailing list archive was over run with spam, but there may still be some stuff in there.



Grant. . . .