A while ago I wanted to make my iptables firewall a bit active. During my searches I found the iptables mirror target, which takes the packet sent to your machine and  returns the same packet to the machine the packet came from. Thus, let’s say someone tries to scan your machine or tries an attack he would scan his own machine or even attack his own machine.  Sadly the mirror target has been dropped somewhere around linux version 2.5 for security concerns. Somewhere in the web I found sources for a 2.5 kernel version and made them work with some 2.6.

I want to share this with the community now. So you can download the modified modules sources on www.mygnu.de. To build the module, boot  the kernel version you want to use the module with, and unpack the archive. Afterwards run the compile.sh script and the install.sh script.

Now you may use the mirror target in place of the reject or drop target  in the INPUT, FORWARD and PREROUTING chains, like this in your firewall script:

$IPTABLES -A INPUT -j MIRROR

Beware: The use of the mirror target may have strange results, i.e. if you want to connect to the iptables protected machine, you may end up connecting to the local machine without recognizing it. It also may use much bandwith. Worst case: if you have two machines using this module they may end up playing pingpong. So you have been warned, use with caution and at your own risk. For more information see: MIRROR target.

Downloads for the most recent kernel versions are below. Notice the version numbering 2.6.25 works for kernels up to 2.6.27. 2.6.28 also works for 2.6.29 and probably for future kernels. If you need a version for an older kernel, leave a comment. Then I can look if I have a module version archived for the kernel version you need.

[download#12] [download#13] [download#14] [download#45]

Addon: The 2.6.28 version also works for 2.6.30 kernels.

These versions do not work with 2.6.31 kernels. See iptables mirror target for kernel version 2.6.31 or iptables mirror target for kernel version 2.6.35 for the newer ones.

regards

Jürgen

(No Ratings Yet)

Loading...

Posted in kernel, linux, networking, security | 14 Comments »

Some days ago Thorsten wrote TuxOnIce is broken in 2.6.29-zen1. Well, I wanted to have a 2.6.29 kernel, because the iwl3945 driver in 2.6.29 works the first time with a useable speed for me.  So I no longer need the hack for the ipw3945 driver I published on ipw3945 unter linux-kernel 2.6.27.

Today I managed to patch the brand new zen-sources-2.6.29-r3 with tuxonice. This was necessary since I need tuxonice on my notebook and tuxonice has been removed permanently from zen-sources. Suspend to RAM works at least on my Dell Precison M65 as well as suspend to disk does.

Since 2.6.29-zen3 has not been released as patch yet, you may download the patch I created from git here: [download#16] Then apply the patch to the vanilla kernel sources available from kernel.org. Afterwards download the tuxonice patch from http://www.tuxonice.net/downloads/all/tuxonice-3.0-for-2.6.29.patch.bz2 and apply it to the kernel sources with the zen patchset already applied.

For Gentoo users there is a more easy way:

Download my modified overlay  (including the patches) from [download#17] and extract it in /usr/local/portage. Be sure to include the following line in your /etc/make.conf:

PORTDIR_OVERLAY="/usr/local/portage"

Then emerge zen-sources-toi and buld the kernel as you wish.

The files above are not from an official zen release. Tuxonice is not officially supported in zen-sources. So If you’re using the files above, don’t report any bugs to zen-sources.org.

For my Precision M65 I used the following kernel config: [download#18]

If you want to use all channels with the iwl3945 driver change the line

static char *ieee80211_regdom = “US”;

to

static char *ieee80211_regdom = “JP”;

in the file net/wireless/reg.c.

For more information on the zen-sources patchset see www.zen-sources.org.

best regards

Jürgen

(No Ratings Yet)

Loading...

Posted in drivers, gentoo, kernel, linux, zen-sources | 1 Comment »

I’ve updated to zen-sources 2.6.28-zen1 and there is a problem in 2.6.28 with the fingerprint reader (usb) on my notebook. So I searched the web and found a bug report with a patch for these sources. I tried this and will tell you that it works fine for me. I hope this will be soon released.

• Howto install the kernel
• download the Patch
• and then patch… $ patch -p1 < downloaded_patch
• now rebuild the kernel and install it.

(No Ratings Yet)

Loading...

Posted in kernel, linux | 10 Comments »