RE: [MOD] Returning the ip of a fragmented packet sender

Greaves Tristan TM (tristan.greaves@x400.icl.co.uk)
Wed, 7 Oct 1998 09:53:44 +0100


This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_000_01BDF1CF.FD87F734
Content-Type: text/plain;
charset="iso-8859-1"

Hi Shaun,

> -----Original Message-----
> From: Shaun Wilson [mailto:plexus@ionet.net]
> Sent: Wednesday, October 07, 1998 12:13 AM
> To: linux-kernel@vger.rutgers.edu
> Subject: [MOD] Returning the ip of a fragmented packet sender
>
> I figured it would be nice to have the ip of the fool who was
> doing this,
> so I could firewall the ip. This information was not
> recorded anywhere
> else, so I made an incredibly small mod for
> net/ipv4/ip_fragment.c that
> shows the ip of the sender of the fragment.

Remember that most programs that send these fragmented packets allow
the user to "spoof" their IP. So I'm not sure how much you can trust
the information you get back.

Tris.

---
Tristan Greaves                        (Systems Integrator) 
Enterprise Solutions                 
ICL                                  Tel: +44 (0)1344 472512 
Lovelace Road                     Mobile: +44 (0)7970 194624 
Bracknell RG12 8SN                  Mail: Tristan.Greaves@icl.com

------_=_NextPart_000_01BDF1CF.FD87F734 Content-Type: application/ms-tnef Content-Transfer-Encoding: base64

eJ8+Ii4IAQaQCAAEAAAAAAABAAEAAQeQBgAIAAAA5AQAAAAAAADoAAEIgAcAGAAAAElQTS5NaWNy b3NvZnQgTWFpbC5Ob3RlADEIAQWAAwAOAAAAzgcKAAcACQA1ACwAAwBTAQEggAMADgAAAM4HCgAH AAkANQAtAAMAVAEBCYABACEAAAA5NTQzMEMwQkMxNUREMjExOTk5RDAwQTAyNDc1OTNEQQACBwEE gAEAOQAAAFJFOiBbTU9EXSBSZXR1cm5pbmcgdGhlIGlwIG9mIGEgZnJhZ21lbnRlZCBwYWNrZXQg c2VuZGVyAK0TAQ2ABAACAAAAAgACAAEDkAYAAAkAADAAAAALAAIAAQAAAAsAKwAAAAAAAwAuAAAA AABAADkAsB9w/c/xvQEeAHAAAQAAADUAAABbTU9EXSBSZXR1cm5pbmcgdGhlIGlwIG9mIGEgZnJh Z21lbnRlZCBwYWNrZXQgc2VuZGVyAAAAAAIBcQABAAAAGwAAAAG98X6TrQ3QbfhdPhHSiCgAoMmE 3IYAFHL1IAAeADFAAQAAABEAAABUUklTVFJBTi5HUkVBVkVTAAAAAAMAGkAAAAAAHgAwQAEAAAAR AAAAVFJJU1RSQU4uR1JFQVZFUwAAAAADABlAAAAAAAIBCRABAAAAfQMAAHkDAABpBQAATFpGdXIJ TcYDAAoAcmNwZzEyNeIyA0N0ZXgFQQEDAff/CoACpAPkBxMCgA/zAFAEVj8IVQeyESUOUQMBAgBj aOEKwHNldDIGAAbDESX2MwRGE7cwEiwRMwjvCfe2OxgfDjA1ESIMYGMAULMLCQFkMzYWUAunYwEw GCBIaQYAE+B1bixHCqIKhAqAPiAtHqJPPQUQZwuAB0AF0AeQc2GsZ2Ueox4mRgNhOh1UlCBXAxBz AiAgWwDAMQMQdG86C1AOwHVzrEBpAiAUIC4jAV0eJjcGYAIwIQBXCYAjAHNkQGF5LCBPYyJAYgkS gTA3JPAxOTk4oSXAMjoxMxDATR4mElQiUCBsC4B1eC1CawSRZWxAdh/QcpAucnV0KEFzLgmAYwxw I5Z1YmoFkCQxW/BNT0RdB/AUIAhwAwCAbmcgdGhlIAUgwCBvZiBhIANQH8DXB4ACMAmAIAqwYyfA BUDdFBBuBIEeJh4mSSvwHxCrCHAsgWkFQHcIYGwskLUlUCADAGMrYCJAIBPgfnYwEStXK0ICEAbw L0BomTBAd2EEIR41ZG8rBP8EAB21HoAhsC5xBaAvci6gmxggMiBsAyArRC4gJxCrM1ErcG4CEHIA wHQi4fkyE25vBUEeNRggBaEBANsskABweTHgBJBlHiYoAP8UECTwNBMAwAEAOHE2IQUA9QmAaQJg eS0QAMA1IQRhLzGBCtQeYiMBLwUgdjTlPPFfLAYuYysxNpAzl/0x8HcEIDC8LSQxFz2WHcq/KqAH gAbQEoE+MjuxcwVA5nADYAnAYW0/MkMRLSL3KzIUECv/dAQgNRE/EB3EjytCIrBCwjBAInNwMaBc ZiIrMjTQLnBQNbBT6TQhJ203I3Mu0TBQPxDjOiAa0GggeQhgNFADkf50KIBDYEaoNjpKch/QBUD2 YizBQZtUBRAo4B3KIBf3TjIBkAOgRxggMHEEIFDPvVE0KAawQ2BCcAQgSSxhU0PBIkByKS31RSxh cv9DkAQAK2BI4ApANqJQvy312ElDTFU/V99UKAAhAMgrNDRSMDApJlBZUZo0AcA1DiAt9UxvMIC/ C2AwAQgAOkBX71viTSVAxQMQZVknNzk3FlAl0Ng0NjJZYB3EQiwQLNATJ/EDIFJHWkE4U07fW+8F 0CIRIQBP1S5QVSLQXGNsPgADcB3EfWOAAAAAHgBCEAEAAABCAAAAPDQ1QUNEM0EzOTU5OEQxMTFC RDA5MDAxMEE4MDAwNDNGMDEwOTA4ODNAY2x1c3RlcjEudHNjLmljbC5jby51az4AAAADAN4/r28A AAsAAIAIIAYAAAAAAMAAAAAAAABGAAAAAAOFAAAAAAAAAwACgAggBgAAAAAAwAAAAAAAAEYAAAAA EIUAAAAAAAADAAWACCAGAAAAAADAAAAAAAAARgAAAABShQAA8BMAAB4AFoAIIAYAAAAAAMAAAAAA AABGAAAAAFSFAAABAAAABAAAADguNQADABeACCAGAAAAAADAAAAAAAAARgAAAAABhQAAAAAAAAsA HIAIIAYAAAAAAMAAAAAAAABGAAAAAA6FAAAAAAAAAwAdgAggBgAAAAAAwAAAAAAAAEYAAAAAEYUA AAAAAAADAB6ACCAGAAAAAADAAAAAAAAARgAAAAAYhQAAAAAAAB4ALIAIIAYAAAAAAMAAAAAAAABG AAAAADaFAAABAAAAAQAAAAAAAAAeAC2ACCAGAAAAAADAAAAAAAAARgAAAAA3hQAAAQAAAAEAAAAA AAAAHgAugAggBgAAAAAAwAAAAAAAAEYAAAAAOIUAAAEAAAABAAAAAAAAAAsAqIALIAYAAAAAAMAA AAAAAABGAAAAAACIAAAAAAAACwCqgAsgBgAAAAAAwAAAAAAAAEYAAAAABYgAAAAAAAALACSBCCAG AAAAAADAAAAAAAAARgAAAAAGhQAAAAAAAAMA8T8JBAAAAwD9P+QEAAADACYAAAAAAAMANgAAAAAA AwCAEP////8CAUcAAQAAADcAAABjPWdiO2E9Z29sZCA0MDA7cD1pY2xleHBvO2w9VFNDX0VYQ0gt OTgxMDA3MDg1MzQ0Wi01MjUAAB4AOEABAAAAEQAAAFRSSVNUUkFOLkdSRUFWRVMAAAAAHgA5QAEA AAARAAAAVFJJU1RSQU4uR1JFQVZFUwAAAABAAAcwovho/c/xvQFAAAgwNPeH/c/xvQEeAD0AAQAA AAUAAABSRTogAAAAAB4AHQ4BAAAANQAAAFtNT0RdIFJldHVybmluZyB0aGUgaXAgb2YgYSBmcmFn bWVudGVkIHBhY2tldCBzZW5kZXIAAAAAHgA1EAEAAABAAAAAPDQ1QUNEM0EzOTU5OEQxMTFCRDA5 MDAxMEE4MDAwNDNGRTZGRDlDQGNsdXN0ZXIxLnRzYy5pY2wuY28udWs+AAsAKQAAAAAACwAjAAAA AAADAAYQW8soTgMABxCxAgAAAwAQEAAAAAADABEQAAAAAB4ACBABAAAAZQAAAEhJU0hBVU4sLS0t LS1PUklHSU5BTE1FU1NBR0UtLS0tLUZST006U0hBVU5XSUxTT05NQUlMVE86UExFWFVTQElPTkVU TkVUU0VOVDpXRURORVNEQVksT0NUT0JFUjA3LDE5OTgAAAAAAgF/AAEAAABAAAAAPDQ1QUNEM0Ez OTU5OEQxMTFCRDA5MDAxMEE4MDAwNDNGRTZGRDlDQGNsdXN0ZXIxLnRzYy5pY2wuY28udWs+AO//

------_=_NextPart_000_01BDF1CF.FD87F734--

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/