On Mon, 10 Jul 2000, Stefan Schlott wrote:
> Hello,
>
> > > I think that there is a need for such a mechanism. At least Mobile IPv6
> > > and probably also IPSec need to add destination options to all packets
> > > sent to certain addresses independently of the sockets. We have added
> > > hooks to our Mobile IPv6 module into ip6_output.c's ip6_xmit and
> > > ip6_build_xmit to add the options before fragmentation is done.
> > 2.4 has netfilterv6, so the right place for it is probably a netfilter
> > module.
> Please tell me that I am wrong, but afaik the netfilter hooks only return
> fragmented packets (nf6 hooks are called after fragmentation when sending,
> and before defragmentation when receiving a packet).
Yes, that's why we added our own hooks. It was easier than using the nf
hook after fragmentation and redoing the fragmentation in our own code.
For the same reason a new nf hook or some other way of adding
destination options would be nice before the fragmentation
in ip6_xmit and ip6_build_xmit.
Henrik
>
> Stefan.
>
> --
> *--- please cut here... -------------------------------------- thanks! ---*
> |-> E-Mail: stefan.schlott@xxxxxxxxxxxxxxxxxx DH-PGP-Key: 0x2F36F4FE <-|
> | An unrecoverable error occured and windows will shut down. If the |
> | problem persists please contact http://www.linux.org/ |
> | -- Seen on Slashdot (08.02.2000) |
> *-------------------------------------------------------------------------*
>
|