change packets with IPFW divert

Shawn Bakhtiar shashaness at hotmail.com
Tue Oct 18 14:23:00 UTC 2016


On Oct 18, 2016, at 6:49 AM, Samira Nazari <nazari.s11 at gmail.com<mailto:nazari.s11 at gmail.com>> wrote:

Hello every one,

When we  diverte packets to the specified port with "IPFW divert" , we can
change it and re-sent to the kernel?
_______________________________________________
freebsd-ipfw at freebsd.org<mailto:freebsd-ipfw at freebsd.org> mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe at freebsd.org"


Not sure what you mean by change it but:

"Divert sockets are similar to raw IP sockets, except that they can be bound to a specific divert port via the bind(2) system call.  The IP address in the bind is ignored; only the port number is significant.  A divert socket bound to a divert port will receive all packets diverted to that port by some (here unspecified) kernel mechanism(s).  Packets may also be written to a divert port, in which case they re-enter kernel IP packet processing."

-- SRC: https://www.freebsd.org/cgi/man.cgi?query=divert&sektion=4&apropos=0&manpath=FreeBSD+10.3-RELEASE+and+Ports







More information about the freebsd-ipfw mailing list