From owner-freebsd-net  Mon Oct 28  8:40:13 2002
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id F00B137B401
	for <freebsd-net@freebsd.org>; Mon, 28 Oct 2002 08:40:11 -0800 (PST)
Received: from InterJet.elischer.org (12-232-206-8.client.attbi.com [12.232.206.8])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 8BB4C43E4A
	for <freebsd-net@freebsd.org>; Mon, 28 Oct 2002 08:40:11 -0800 (PST)
	(envelope-from julian@elischer.org)
Received: from localhost (localhost.elischer.org [127.0.0.1])
	by InterJet.elischer.org (8.9.1a/8.9.1) with ESMTP id IAA24005;
	Mon, 28 Oct 2002 08:23:45 -0800 (PST)
Date: Mon, 28 Oct 2002 08:23:44 -0800 (PST)
From: Julian Elischer <julian@elischer.org>
To: sepehr sohrabi <sepehr_soh@hotmail.com>
Cc: freebsd-net@freebsd.org
Subject: Re: spoofing source code in kernel
In-Reply-To: <F31rsOZoybKw2NIMcDE00006c3c@hotmail.com>
Message-ID: <Pine.BSF.4.21.0210280819220.13443-100000@InterJet.elischer.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=X-UNKNOWN
Content-Transfer-Encoding: QUOTED-PRINTABLE
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-net.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-net>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-net>
X-Loop: FreeBSD.org

I had two at one stage..
they used two methods.

1/ divert to a daemon that does it... natd has 80% or the logic needed
already.

2/ a netgraph node hooked on top of the ethernet interface.

Unfortunatly I don't have either any more..

Eventually I figured out that I could use ipfw 'fwd'
by forwarding to a dumb proxy. this emant that the tcp session was in
fact terminated by the tcp stack in my machine
and that emulated tcp perfectly :-)

On Mon, 28 Oct 2002, sepehr sohrabi wrote:

> Hi list
> Anyone has source code for spoofing (in kernel) for all input Tcp/IP pack=
ets=20
> .For any TCP/IP packet recieve it creates an ACK for it .
> someThing like spoofing GW
> CLIENT <-----> GW <-------> server
>         connections are spoofed
> THANX
>=20
> _________________________________________________________________
> Broadband?=A0Dial-up? Get reliable MSN Internet Access.=20
> http://resourcecenter.msn.com/access/plans/default.asp
>=20
>=20
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-net" in the body of the message
>=20


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message