using ip_defrag in NF_IP_FORWARDING

using ip_defrag in NF_IP_FORWARDING

[rigoberto perez]

I need to re-assemble a packet even if it don't go to
the local  machine. So, I called to the ip_defrag
function into the NF_IP_FORWARDING hook  and the
system crashes. It's that posible or it's a mistake?.
I wanna know: how I can re-assemble all incomming
packets?. Thanks.



      ____________________________________________________________________________________
Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs

Re: using ip_defrag in NF_IP_FORWARDING

[Jan Engelhardt]

On Feb 29 2008 08:32, rigoberto perez wrote:
>
>I need to re-assemble a packet even if it don't go to
>the local  machine. So, I called to the ip_defrag
>function into the NF_IP_FORWARDING hook  and the
>system crashes. It's that posible or it's a mistake?.
>I wanna know: how I can re-assemble all incomming
>packets?. Thanks.

More like mistake. If you have nf_conntrack loaded,
defrag always(?) happens.

Re: using ip_defrag in NF_IP_FORWARDING

[rigoberto perez]

How can I load conntrack? 

I write a netfilter module and I define the hook
priority = NF_IP_PRI_CONNTRACK in a NF_IP_PRE_ROUTING
hook and call to ip_defrag and the system crashes. I
tried to use another priority =
NF_IP_PRI_CONNTRACK_DEFRAG and it's the same: the
system crashes again.

I saw in the WEB a comment about to use ip_defrag only
in the NF_IP_FORWARDING and NF_IP_LOCAL_OUT hooks
only, is that correct?

Remember my problem: I want to use ip_defrag even if
the packet must be forward to another host, i mean, in
a router.

Thanks.


      ____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping