[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

How to proxy a non blocking connect with a socket filter?

Subject: How to proxy a non blocking connect with a socket filter?
From: "Karl Pickett" <email@hidden>
Date: Tue, 9 Oct 2007 15:39:46 -0400
Delivered-to: email@hidden
Delivered-to: email@hidden
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type; bh=JEhEFeWtdqlTzhBR+S5q/41sAF4MzQiJoIDAUXfDlF4=; b=FUvQhCht6dy0+z541K9Np8krPnNg9CobDIWg4HlDTT+GnSthoRjCMSSRFHVFzNRAHy3dMDJxT+GTn9YdeXikDPf498hHoRRSn9oNgUs2yFJEbRPEsaYwCL5aTe8f/m/sOQ8ISWtNtVHRn5XMK576Xb0nex3x+bxPLqE+zNnUAGA=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type; b=oEA60EDV/hYVC3WwftCsl4CIuYPHtuvNemDl+MnSoyb5g4LS9BePFmj66L+zkk9TWhYAP+96OjREWUfLd/bW/hvnFwMSNbPQEf6Fttszbvcm5DQ3Y0kGhExCk843lqZyaUuLszhes0Y4TS6jnpreQfwjJPOOftU/M11BgmUiB58=

After having run into the unfortunate limitation of a socket filter not being able to stop or delay a remote tcp socket close from being visible, I am trying to find another way to solve the problem.

I have changed my socket filter to proxy connects to a user space process instead of swallowing packets as proposed by the message below. This appears to be working well for blocking connects, but I have no idea how to hook a non blocking connect properly.

In message http://lists.apple.com/archives/darwin-kernel/2007/Mar/msg00081.html
it says:
If the socket is a non-blocking socket, things may be a little trickier. I can't remember the exact details, but it can be made to work.Would someone know those details? :)

--
Karl Pickett
"They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety." -- Benjamin Franklin
"Eternal vigilance is the price of liberty." -- Wendell Phillips
"One man with courage makes a majority." -- Andrew Jackson, 1832

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/darwin-kernel/email@hidden

This email sent to email@hidden

Prev by Date: Re: Loading Kext at Boot Time
Next by Date: Kernel authorization (Kauth) from user space
Previous by thread: Re: Loading Kext at Boot Time
Next by thread: Kernel authorization (Kauth) from user space
Index(es):
- Date
- Thread

Home