Re: URL filtering / IP Filter NKE
Re: URL filtering / IP Filter NKE
- Subject: Re: URL filtering / IP Filter NKE
- From: "Quinn \"The Eskimo!\"" <email@hidden>
- Date: Fri, 24 Jun 2011 09:26:03 +0100
On 23 Jun 2011, at 13:16, Deena Awate wrote:
> 1. I should drop the packet in ipf_output(return -1) and create a new packet having the source and dest ip/port from the dropped packet and set the RST flag and pass this newly generated packet to user mode. In doing this my query is how do I send the packet to user mode? Should I inject the packet in the output stream using ipf_inject_output passing a reference to my filter?
Calling ipf_inject_output will send it out to the wire, which is the exact opposite of what you want. Rather, you should call ipf_inject_input.
> 2. If I am supposed to do 1. do I compute chksum using mbuf_inet_cksum()
The packet you inject must have a valid checksum. How you calculate that checksum is up to you, but mbuf_inet_cksum is likely to be useful.
S+E
--
Quinn "The Eskimo!" <http://www.apple.com/developer/>
Apple Developer Relations, Developer Technical Support, Core OS/Hardware
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden