| 1 |
Hello morgan, |
| 2 |
|
| 3 |
Wednesday, October 5, 2005, 12:12:53 AM, you wrote: |
| 4 |
|
| 5 |
ma> Here is a method I use to frustrate people trying to |
| 6 |
ma> nab my wifi connection using iptables (wireless router |
| 7 |
->> linux router -> dsl -> net). The wireless router in |
| 8 |
ma> setup with a basic NAT for my desktops and wireless |
| 9 |
ma> but the wireless comes in on its own nic. with |
| 10 |
ma> prerouting set to drop, I have |
| 11 |
ma> [1:56] -A PREROUTING -m ttl --ttl-eq 202 -j ACCEPT |
| 12 |
|
| 13 |
echo 204 >> /proc/sys/net/ipv4/ip_default_ttl |
| 14 |
ma> on my laptop init |
| 15 |
|
| 16 |
Correct me if I wrong, but it works only from lan, because ttl decreases when routed. |
| 17 |
|
| 18 |
Also it needs root or special user to change /proc/sys/... |
| 19 |
|
| 20 |
|
| 21 |
-- |
| 22 |
Best regards, |
| 23 |
boger mailto:boger@×××.ru |
| 24 |
|
| 25 |
-- |
| 26 |
gentoo-security@g.o mailing list |
Archives