Re: Using Shorewall to change TTL

Tom Eastep
2006-09-19T14:07:24Z

Tom Eastep wrote:
> Tom Eastep wrote:
>> Fitzpatrick, Andrew wrote:
>>> I''ve searched and searched but couldn''t find any
info on actually how to
>>> do it.
>>>
>>> I basically want to do this:
>>> _http://www.faqs.org/docs/iptables/targets.html#TTLTARGET_
>>>
>>> Is there a way I can get shorewall to do it for me
>> No -- you have to do it yourself but the article that I referred you to
>> gives you everything you need.
>>
>
> And just in case you are not the same poster that asked this question
> within the last week, you need to use an Action with an extension script:
>
> 	http://www.shorewall.net/Actions.html

Andrew

My apologies -- We had another TTL query this week (after not having had any for
several years) and I wrongly assumed that you were the same poster that had
already asked and been answered.

As I stated above, there is no way to get Shorewall to do this for you -- but
rather than use an Action as I advised in my previous post, you must use one of
the standard extension scripts
(http://www1.shorewall.net/shorewall_extension_scripts.htm) and code your own
iptables command(s).

HTH.