linux-kernel - A problem of netfilter HOOK point

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <200612201622446099344@netarchlab.tsinghua.edu.cn>
Date:	Wed, 20 Dec 2006 16:22:49 +0800
From:	"xlz" <xlz@...archlab.tsinghua.edu.cn>
To:	"netfilter-devel" <netfilter-devel@...ts.netfilter.org>,
	"linux-kernel" <linux-kernel@...r.kernel.org>
Subject: A problem of netfilter HOOK point

Hi,
    I have a problem of the netfilter HOOK point. I load my handle function in HOOK point NF_IP6_LOCAL_OUT. But, its behavior is likely to be in the HOOK point NF_IP6_POST_ROUTING. The detail is shown as follows:

	I configrue a 6to4 tunnel between two linux hosts (2.6 kernel) by adding a interface "6to4tun". The route table in one of the host is:
		2002:c0a8:101::/48   dev 6to4tun
		default              via   3ffe:250:cccc::1  dev eth0
	The 6to4 tunnel works well before I load my own handle function in the hook point NF_IP6_LOCAL_OUT.

	In the hook point NF_IP6_LOCAL_OUT, my handle funtion changes the destination address of the packet from global ipv6 address (ex. 3ffe:250:cccd::2) to 6to4 address (ex. 2002:c0a8:101::1). In my expection, after changing the destination address in hook point NF_IP6_LOCAL_OUT, the host will look up the route table according the destination address, which is a 6to4 address. And then the host will send the packet from the interface "6to4tun". However, the experiment result is: the packets are sent from the interface eth0. It seems that the host looks up the route table according the global address. That means my own function seems to work in the hook point  NF_IP6_POST_ROUTING.
	What is the problem?
	
	Thank you in advance for any help!

Lizhong Xie
2006-12-20

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/