HNGlance

Top Best New Show

Dissecting OpenBSD's divert(4)

http://lteo.net/blog/2015/01/06/dissecting-openbsds-divert-4-part-1-introduction/

by fcambus • 12 years ago

69 3 12 years ago

LT

Related Stories

Loading related stories...

Comments

3

mben• 12 years ago

Check pf-diverters [1]. We are using them in our openbsd firewalls in order to block unwanted connections.

[1] https://github.com/echothrust/pf-diverters

gizzlon• 12 years ago

Cool, I run a pf firewall but this was news to me.

Anyone have any idea of the performance overhead? (Not that it really matters for me, just curious)

mct• 12 years ago

There is a similar feature in Linux which I've used a number of times over the years to simulate various network problems, and to modify packets flowing through my router in interesting ways.

You can select packets to be sent to userspace with the "-j QUEUE" iptables target handler, and then read those packets using libnetfilter.

Source preview

lteo.net

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms