[Gllug] fake ICMP replies?

Julian Somers lists at bigpip.com
Fri Feb 10 16:32:00 UTC 2006


On 10 Feb 2006, at 15:56, Andy McGarty wrote:

>
>>
>> Is there a way I can make this linux router 'fake' ICMP responses,  
>> so that this application always gets past the ICMP test?
>>
>> I have an idea that I can do it with an IPtables rule, but at this  
>> time on a friday, it's just not coming together...
>>
> This is what I did to stop one of my customers custoemrs from  
> continually trying to ping the putside world to check the satellite  
> link was up.
>     iptables -t nat -F
>     iptables -t nat -X
>
>     iptables -t nat -A PREROUTING  -i eth0 -p icmp -j DNAT --to  
> THESERVERSIPADDRESS

Many thanks, Andy. That works.

This works too
  iptables -t nat -A PREROUTING -i eth0 -p icmp -j REDIRECT

Took me about an hour! Friday afternoon!

Julian


-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug




More information about the GLLUG mailing list