linux-kernel - Re: tcp/ip connect on demand

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 03 Jul 2008 11:28:54 -0700
From:	"H. Peter Anvin" <hpa@...or.com>
To:	Jens-Michael Hoffmann <J.Hoffmann@...ion.com>
CC:	linux-kernel@...r.kernel.org
Subject: Re: tcp/ip connect on demand

Jens-Michael Hoffmann wrote:
> hi,
> 
> what is the right way to implement a "connect on demand" feature?
> Example: user types url in firefox and presses return. Then
> the system should set up network devices and proceed as usual.
> 
> Is there a hook in the kernel we can use?

In the kernel, no.  Nor do you need one; the best place to hook into 
this is probably the name service system (so you catch it on trying to 
look up hostnames.)

Alternatively, you can set up a bridge device which you can listen to 
via a tap device; when you see traffic, you bring up the real network 
and attach it to the bridge.

	-hpa
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/