From owner-freebsd-questions@FreeBSD.ORG Tue Aug 19 19:13:47 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9A48D106564A for ; Tue, 19 Aug 2008 19:13:47 +0000 (UTC) (envelope-from jav@sics.se) Received: from letter.sics.se (letter.sics.se [193.10.64.6]) by mx1.freebsd.org (Postfix) with ESMTP id 5E89A8FC1F for ; Tue, 19 Aug 2008 19:13:47 +0000 (UTC) (envelope-from jav@sics.se) Received: from [10.131.10.251] (unknown [12.19.192.51]) by letter.sics.se (Postfix) with ESMTP id 1D2BA4000C for ; Tue, 19 Aug 2008 20:46:19 +0200 (CEST) From: Javier Ubillos To: freebsd-questions@freebsd.org Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-mq5GzFp2GFb19FE/xw0I" Date: Tue, 19 Aug 2008 11:46:03 -0700 Message-Id: <1219171563.7916.32.camel@dib> Mime-Version: 1.0 X-Mailer: Evolution 2.22.3.1 Subject: Override default ICMP (and other protocols) default replies. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Aug 2008 19:13:47 -0000 --=-mq5GzFp2GFb19FE/xw0I Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Hi freebsd-questions. I'm implementing a NAT (1 ip - 1 ip) like router. I have chosen to use pcaplib to pick up the packets. I have an implementation which picks up the packets, inspects them, rewrites the destination/source ip-addresses and sends them out on the repective interface. The problem I'm facing however is that my interfaces are answering to e.g. icmp-echo (ping) automatically, and I don't know how to turn this behaviour off. What I want to happen is that if A pings C, my router B in between should simply forward the packets w/o any automatic reactions. A --> B --> C So that if e.g. C is down, no echo-reply is sent back (or if C is up, that C is actually sending the echo-reply. Does any one know how to turn off the automatic replies (ICMP and whatever else I haven't forseen yet) or does any one know where I can find out more about the issue? Thank you // Javier --=-mq5GzFp2GFb19FE/xw0I Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQBIqxTrGBo5FLRz4goRAlAaAJ9RSp/xCL445H7Y1X/012BLDQDgggCfUjST DvefGpXtR9faUxMACA4zDBE= =Kedw -----END PGP SIGNATURE----- --=-mq5GzFp2GFb19FE/xw0I--