Hello!
> I could use skb->dst->output(skb);
If transformed packets need not fragmentation.
> but then it would break possible
> ipchain settings since outgoing pckets would no longer go trough it
> (ipchains module has lowest priority)
You can call call_out_firewall yourself. It is public.
> ip_queue_xmit() this sadly sets frag_off to 0.
In no curcumstances. ip_queue_xmit() cannot be used by anyone but TCP.
It does special assumptions, valid only for TCP sockets.
Use macro ip_send() and call call_out_firewall yourself,
if it is really required.
Alexey Kuznetsov
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]
