Date: Fri, 23 Apr 2004 02:34:21 +0200 From: GiZmen <gizmen@blurp.one.pl> To: freebsd-hackers@freebsd.org Subject: Re: Changing ttl of incoming packets Message-ID: <20040423003421.GB39351@blurp.one.pl> In-Reply-To: <cone.1082644235.488773.739.1001@phobos.totalterror.net> References: <20040422095415.GA31126@blurp.one.pl> <20040422131040.GB9359@ip.net.ua> <cone.1082644235.488773.739.1001@phobos.totalterror.net>
next in thread | previous in thread | raw e-mail | index | archive | help
> >> > >>Is there any way to change ttl of incoming packet to a lower value ? > >>I had tried min-ttl option in pf packet filter but this option only > >>increase > >>ttl to a given value when ttl is lower than this value. > >> > >>I have searched on google and mailing lists but i do not find any answer. > >>I am running Freebsd 5.2.1 and i am using pf as my packet filter. > >> > >You mean, make the IP forwarding decrement the IP TTL more than by one? > i've seen some cable/dsl ips's to do this, they set the IP TTL to 1 on the > downlink to the client. (as a lame attempt to stop people sharing their > connection) > So if one put some sort of gateway on the dsl/cable modem, all > the packets it receives are with IP TTL 1, and the gateway will not able to > forward them to the internal network....... which is in my opinion > 1-st ugly, and 2-nd, easily avoidable with min-ttl for example :) > but if pf has min-ttl it seems that max-ttl can be easily added. > also i think i've seen somewhere on the net a netgraph module that can > modify ttl's and some other things. i think it's name was ng_mangle ---end quoted text--- Yes true i saw some gateways that use this trick too and that was my inspiration to look around how it can be done. But i didnt found any option to do that. max-ttl option would be a good idea to add to pf :) So there is no posibility to change ttl with kernel or some other tool. So how this dsl/cable modem gateways change theirs ttl to 1? thx -- Best Regards: GiZmen UNIX is user-friendly; it's just picky about its friends UNIX is simple; it just takes a genius to understand its simplicity
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040423003421.GB39351>