Re: [MISC] Angreb på 127.0.0.1

[Jacob Bunk Nielsen <sslug@sslug>]

Anders Misfeldt <sslug@sslug> writes:

> Han sidder sikkert stadig og undrer sig over Elch' super firewall.

Ja, god underholdning, men faktisk så kan Linux jo også sådan noget.
iptables har et target der hedder MIRROR:

,----[ Fra iptables(8) ]
|  MIRROR
|    This is an experimental demonstration target which inverts  the  source
|    and destination fields in the IP header and retransmits the packet.  It
|    is only valid in the INPUT, FORWARD and PREROUTING  chains,  and  user-
|    defined  chains which are only called from those chains.  Note that the
|    outgoing packets are NOT seen by any packet filtering  chains,  connec-
|    tion tracking or NAT, to avoid loops and other problems.
`----

-- 
Jacob - www.bunk.cc
My haircut is totally traditional!