From owner-freebsd-net  Mon Oct 28  7: 6:21 2002
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9D35137B401
	for <freebsd-net@freebsd.org>; Mon, 28 Oct 2002 07:06:20 -0800 (PST)
Received: from tesla.foo.is (tesla.reverse-bias.org [217.151.166.96])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 831B743E77
	for <freebsd-net@freebsd.org>; Mon, 28 Oct 2002 07:06:19 -0800 (PST)
	(envelope-from baldur@foo.is)
Received: from there (eniac.foo.is [192.168.1.25])
	by tesla.foo.is (Postfix) with SMTP
	id 10248AB93; Mon, 28 Oct 2002 15:06:07 +0000 (GMT)
Content-Type: text/plain;
  charset="iso-8859-1"
From: Baldur Gislason <baldur@foo.is>
To: Don Bowman <don@sandvine.com>
Subject: Re: spoofing source code in kernel
Date: Mon, 28 Oct 2002 15:06:06 +0000
X-Mailer: KMail [version 1.3.2]
References: <FE045D4D9F7AED4CBFF1B3B813C8533701022DA4@mail.sandvine.com>
In-Reply-To: <FE045D4D9F7AED4CBFF1B3B813C8533701022DA4@mail.sandvine.com>
Cc: freebsd-net@freebsd.org
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Message-Id: <20021028150607.10248AB93@tesla.foo.is>
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-net.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-net>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-net>
X-Loop: FreeBSD.org

ipfw allows you to catch the connections, but it doesn't enable your 
application to spoof the proxied connection as if it was coming straight from 
the client.

Baldur

On Monday 28 October 2002 15:01, you wrote:
> From: sepehr sohrabi [mailto:sepehr_soh@hotmail.com]
>
> > Hi list
> > Anyone has source code for spoofing (in kernel) for all input
> > Tcp/IP packets
> > .For any TCP/IP packet recieve it creates an ACK for it .
> > someThing like spoofing GW
> > CLIENT <-----> GW <-------> server
> >         connections are spoofed
> > THANX
>
> ipfw with a 'fwd' rule will let you do something like this.
> Run a user-mode application on port X, then do
> ipfw fwd localhost,X tcp from any to any recv myinterface
>
> and any inbound TCP connection will be terminated locally.
>
> --don (don@sandvine.com www.sandvine.com p2p)
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-net" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message