How to not receive a TCP packet...
Stefan Savage (savage@cs.washington.edu)
Mon, 17 Aug 1998 10:52:26 -0700
After further study, I've found that Eric is correct and my DONTROUTE
hack (as I described in last weeks meeting) only works on the local net.
Therefore, while it is adequate for testing tools, it doesn't give
access to remote sights. The other two options are Eric's hack (get
another IP address and proxy arp for it...) or doing a kernel hack to
allow TCP packets to be ignored when my filter recognizes them (so as
not to send a RST). Anyway, I don't particular like any of these ideas.
The kernel hack isn't very portable, and Eric's hack has the problem
that it requires the user to get another IP address (and we know how
hard that is to do some places.... I suppose we could add a DHCP
implementation, but then the tool starts to become absurdly
complicated). If anyone has some new ideas about how to handle this I'm
listening.... otherwise I may do the kernel hack to start with, just
because its easier.
- Stefan