OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Forward to next hop in ipf
From: Fernando Schapachnik (fpschans1.via-net-works.net.ar)
Date: Tue Jul 04 2000 - 09:41:34 CDT

En un mensaje anterior, Andrey V. Sokolov escribió:
[Charset koi8-r unsupported, filtering to ASCII...]
> IMHO "fastroute" is option for make a stealth forwarding without a ttl
> decrementing.

You are right.

> I have tested "to" option
> default gateway is 192.168.0.1
> The config string is:
> pass out log quick on ed0 to 192.168.0.2 from 192.168.0.2/32 to any
> where 192.168.0.2 is my new gateway, but it didn't works!

From the ipf how-to: you would be better off with something like:

block out log quick on ed0 to <iface> from <ip>/32 to any

You will be blocking the normal packet and deviating the original one
to <iface>. Besides, I can't see the point of "to 192.168.0.2 from
192.168.0.2".

Good luck!

Fernando P. Schapachnik
Administración de la red
VIA NET.WORKS ARGENTINA S.A.
fernandovia-net-works.net.ar
(54-11) 4323-3333

To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message