Re: stopping the packets from getting to kernel
Alberto Ornaghi <[email protected]> Tue, 06 Jul 2004 17:19:25 +0200
| Newsgroups | gmane.comp.security.libnet |
|---|---|
| Message-ID | <[email protected]> |
Mustafa Abu Sedera wrote:
> For example.. I send a TCP SYN packet to some host X using libnet..then
> X replies with a SYN Ack...I capture this packet with libpcap and want
> to reply with a Ack but the kernel also gets a copy from it and
> immediately sends a reset because as for the kernel it is a Ack packet
> which he did not send the SYN for. So the TCP session gets destroyed..is
> there any way to hinder the packets captured by libpcap from reaching
> the kernel or is there any other idea on how to solve this issue???
you can write an iptables (or equivalent) rule to discard the packet. so
it will never reach your kernel.
bye
--
--==> ALoR <==---------------------- - - -
There are only 10 types of people in this world...
Those who understand binary, and those who don't.