From owner-freebsd-isp@FreeBSD.ORG Tue Jul 24 18:52:20 2007 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9D49716A418 for ; Tue, 24 Jul 2007 18:52:20 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from mail-out3.apple.com (mail-out3.apple.com [17.254.13.22]) by mx1.freebsd.org (Postfix) with ESMTP id 884A913C491 for ; Tue, 24 Jul 2007 18:52:20 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from relay6.apple.com (relay6.apple.com [17.128.113.36]) by mail-out3.apple.com (Postfix) with ESMTP id 4937ACA49B0; Tue, 24 Jul 2007 11:28:04 -0700 (PDT) Received: from relay6.apple.com (unknown [127.0.0.1]) by relay6.apple.com (Symantec Mail Security) with ESMTP id 369E510042; Tue, 24 Jul 2007 11:28:04 -0700 (PDT) X-AuditID: 11807124-a4fb7bb0000007f3-6f-46a644b49427 Received: from [17.214.13.96] (cswiger1.apple.com [17.214.13.96]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by relay6.apple.com (Apple SCV relay) with ESMTP id 225B610025; Tue, 24 Jul 2007 11:28:04 -0700 (PDT) In-Reply-To: <46A63AF2.40405@wlink.com.np> References: <46A63AF2.40405@wlink.com.np> Mime-Version: 1.0 (Apple Message framework v752.2) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Chuck Swiger Date: Tue, 24 Jul 2007 11:28:03 -0700 To: Samit X-Mailer: Apple Mail (2.752.2) X-Brightmail-Tracker: AAAAAA== Cc: freebsd-isp@freebsd.org Subject: Re: changing ttl size of forwarding packet X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Jul 2007 18:52:20 -0000 On Jul 24, 2007, at 10:46 AM, Samit wrote: > iptables can easily do it via mangle table. Is there any way using > ipfw2 > to change the ttl size of the forwarding packets? The size of the TTL field is fixed by the IP protocol to 1 byte; perhaps you are looking for the IPFW transparent firewall option, which prevents it from decrementing the TTL in order to make a "hidden" firewall...? -- -Chuck