iptables -j MIRROR

sqn · 11-24-2003, 03:03 AM

well, i was trying tu understand how this works, and this is what i have figured out so far:

if a bad IP is trying to connect to my host using ssh :
ssh
192.168.0.1 -----------------------> 192.168.0.10
bad IP server

then the -j MIRROR wil do the folowing:

mirror
192.168.0.1 -----------------> 192.168.0.1
and so becose the bad ip does not have a sshd server i will get a canot connect statement.

Well i want to know if i am right, and if not why

THX in advanced

MrGreg · 11-24-2003, 05:22 AM

The MIRROR target switches IP addressess and src/dst ports and retransmits the packets. What you said should be true.

sqn · 11-24-2003, 09:46 AM

so the rule for setting it up is:

iptables -A input -s 192.168.0.1 -p tcp -d 192.168.0.10 --dport 22 -j MIRROR

OK
thx in again...