netdev - question on raw sockets and source IP address validation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4ABBB223.8090700@nortel.com>
Date:	Thu, 24 Sep 2009 11:53:39 -0600
From:	"Chris Friesen" <cfriesen@...tel.com>
To:	Linux Network Development list <netdev@...r.kernel.org>
Subject: question on raw sockets and source IP address validation

Hi all,

Normally when sending a packet on a SOCK_RAW socket the source IP
address is validated against the addresses configured on the host.  If
the address isn't configured, the packet isn't sent.

This can be avoided by setting IP_HDRINCL, but then the app needs to
handle all the fragmentation itself.

Is there any way to bypass the source address validation without IP_HDRINCL?

Thanks,

Chris
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html