Re: teardrop and Linux as a router
ralf@uni-koblenz.de
Sun, 23 Nov 1997 18:03:33 +0100
On Sat, Nov 22, 1997 at 11:48:11PM -0200, Marcelo Mercio Dandrea wrote:
> Hello There,
>
> Its possible to patch the kernel to not only be resistent to
> teardrop ip frags but also, when the machine has Ip_forwarding compiled
> in, dump these frags instead of passing them along ?
> Sorry if its already this way.
In order to do this defragmenting the packet is one of the solutions.
When transparent proxying is enable Linux will be a defragmenting router.
You also can just add -DCONFIG_IP_ALWAYS_DEFRAG to the CFLAGS in the
Makefile, it will only enable the defragmenting stuff.
Ralf