Thanks Julian. But we are rewriting Kernel src file  ip_fw.c (which
does implement the ipfw system call i guess) to do the redirection
automatically for us, because redirection is faster at the Kernel than at
the user level.
Unfortunately I am new to writing code at the kernel level. The main
problem is that I don't know what files specifically I need to rewrite, is
it just ip_fw.c or any ohter files.. I don't know wether just rewriting
the packet ip_dst.s_addr is enough? This is similar to network address
translater except for the fact that our kernel will run on a proxy closer
to the client than to the server..

Partha





On Tue, 16 Nov 1999, Julian Elischer wrote:

> You can use the ipfw "fwd" command
> (man 8 ipfw)
> you need to also run ipfw 'fwd' commands on the servers otherwise they
> will send the packet back to it's original destination.
> 
> alternatively you could have no real machine with that address but set a
> loopback interface to the target address on each machine so that
> each machine would accept the packet when it arrived.
> if you want to actually CHANGE the packet then I believe natd can do that
> but I've not done it.
> julian
> 
> (p.s. tell more about your set-up and maybe I can be more specific)
> 
> 
> On Wed, 17 Nov 1999, Parthasarathy M. Aji wrote:
> 
> > Hey,
> > i want to do packet filtering and redirection through the
> > kernel. Specifically, My application will be on an intermediate node,
> > through which, I want to redirect every packet that comes through me to a
> > different server. Would you know what files I might want to look into
> > this( like ip_fw.c for eg) etc..? ..
> > 
> > Partha
> > 
> > 
> > 
> > 
> > To Unsubscribe: send mail to [EMAIL PROTECTED]
> > with "unsubscribe freebsd-hackers" in the body of the message
> > 
> 
> 



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message

Reply via email to