[hank-devel] Re: hank questions (fwd)

[<tl...@mi...>]

Forwarded FYI.  Please, if you're sending me a question on Hank, please
consider sending it instead to the mailing list if it's a question on
which others might have interest, like this one.

--
Todd Lewis
tl...@mi...

Q: How many marxists does it take to screw in a lightbulb?
A: None - the bulb contains the seeds of its own revolution. 

---------- Forwarded message ----------
Date: Fri, 18 Jan 2002 13:22:39 -0500 (EST)
From: tl...@mi...
To: K.William Young <wy...@wy...>
Subject: Re: hank questions

I don't think that libipq allows rewrites.  I need to update the
capabilities flags of the paenine to indicate that.  The way to modify
a packet is to drop the original and inject the new with libpacket or
whatever; ditto for creating new ones.  However, if you want to pursue
rewriting within the main flow of things, I suggest taking a look at some
other libipq applications that rewrite packets, seeing what they do, and
then let's figure out how to make it work.  That's the long and correct
way; dropping and injecting anew is the easy, portable and gross way to do it.

--
Todd Lewis
tl...@mi...

Q: How many marxists does it take to screw in a lightbulb?
A: None - the bulb contains the seeds of its own revolution. 

On 18 Jan 2002, K.William Young wrote:

> I read firewall.c and matcher_tlewis.c.
> 
> 1) To alter a packet, can I make the changes to the packet->payload and then let libipq take care of the rest?
> 
> 2) Can I generate a new packet* and then insert it with ipq_set_verdict? Is this the best way to add ICMP rejects?
> 
> Will
> 
> K. William Young
> wy...@wy...
>