ip_queue.c and TCP resets

From: Michael Rash (mrash_at_enterasys.com)
Date: 08/30/05

  • Next message: Stephen Hemminger: "Re: Very strange Marvell/Yukon Gigabit NIC networking problems"
    To: linux-kernel@vger.kernel.org
    Date:	Tue, 30 Aug 2005 17:01:43 -0400
    
    
    

    Attached is a patch against
    linux-2.6.11.12/net/ipv4/netfilter/ip_queue.c to put Ethernet MAC
    addresses directly into the indev_name and outdev_name portions of the
    ipq_packet_msg struct. This is a total kludge and I doubt anyone else
    will find this useful, but for libipq IPS applications it allows TCP
    resets and other response traffic to be sent out of the appropriate
    physical ports when running as an Ethernet bridge. I'm sure there are
    better ways to do this, but it seems to work.

    -- 
    Michael Rash
    Security Research Engineer
    Enterasys Networks, Inc.
    
    

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/



  • Next message: Stephen Hemminger: "Re: Very strange Marvell/Yukon Gigabit NIC networking problems"

    Relevant Pages