Re: URL filtering / IP Filter NKE
Re: URL filtering / IP Filter NKE
- Subject: Re: URL filtering / IP Filter NKE
- From: Deena Awate <email@hidden>
- Date: Thu, 23 Jun 2011 05:16:09 -0700 (PDT)
| Hello Quinn,
Sorry if my question sounds too easy for you to answer. I am new to this.
By saying that I need to send a TCP packet back to app, do you mean:
1. I should drop the packet in ipf_output(return -1) and create a new packet having the source and dest ip/port from the dropped packet and set the RST flag and pass this newly generated packet to user mode. In doing this my query is how do I send the packet to user mode? Should I inject the packet in the output stream using ipf_inject_output passing a reference to my filter?
2. If I am supposed to do 1. do I compute chksum using mbuf_inet_cksum()
Thanks, Deena --- On Thu, 6/23/11, Quinn "The Eskimo!" <email@hidden> wrote:
From: Quinn "The Eskimo!" <email@hidden>
Subject: Re: URL filtering / IP Filter NKE
To: "Mac Network Programming" <email@hidden>
Date: Thursday, June 23, 2011, 3:30 AM
On 22 Jun 2011, at 11:46, Deena Awate wrote: > I had tried my hands on option B. Through socket filter I could get just the IP address and not the URL. Well, the URL is not transmitted until the connection is complete, and you'd have to grovel through the HTTP header to find it. But that's not different from doing it at the IP layer. > The error returned from socket filter was informative but I am unable to achieve the same through IP filter. Correct. > I looked around for synthesising a connection reset, but could not find how to do it. This is just basic TCP.
email sent to email@hidden
|
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden