diff options
author | Jason Fesler <jfesler@guest.gigo.com> | 2015-02-17 10:55:38 -0800 |
---|---|---|
committer | Jason Fesler <jfesler@guest.gigo.com> | 2015-02-17 10:55:38 -0800 |
commit | e6123d6e145f4e35d8f3e004891a5645d2e11197 (patch) | |
tree | 570d5766345dd004bddbc162d8ed36501c97eb51 /README | |
parent | 5403487c00490d624451079c66aaad4f05f493a3 (diff) | |
download | mtu1280d-e6123d6e145f4e35d8f3e004891a5645d2e11197.tar.gz mtu1280d-e6123d6e145f4e35d8f3e004891a5645d2e11197.zip |
wip
Diffstat (limited to 'README')
-rw-r--r-- | README | 34 |
1 files changed, 34 insertions, 0 deletions
@@ -0,0 +1,34 @@ +mtu1280 - emulates serving via a low MTU IPv6 tunnel +---------------------------------------------------- + +This program is will generate ICMPv6 "Packet Too Big" +responses with an MTU of 1280. mtu1280 will connect to +a netfilter_queue socket, listening for packets; and +respond to all packets sent to that queue. + +This is meant to be ran on a secondary IP for your host. +It is recommend that your primary IP is NOT used with +this technique in case of application failure. + +To deploy, compile build and install. Copy +in one of the init or init.d scripts, and make sure +it is set for auto-start for your OS. An actual reboot +is recommended. + +Once up and running, configure ip6tables to route +large packets destined to the desired IP to the netfilter queue. + +Example rule: + +``` +guest% sudo ip6tables-save | grep NFQ +-A INPUT -d 2001:470:1f04:d63::2/128 -m length --length 1281:65535 -j -NFQUEUE --queue-num 1280 +``` + + +LICENSE +------- +GPLv2, due to the duplicated code from Hararld Welte's +libnetfilter_queue-1.0.2/utils/nfqnl_test.c (included). + + |