diff options
| author | Toni Uhlig <matzeton@googlemail.com> | 2018-12-24 11:59:52 +0100 |
|---|---|---|
| committer | Toni Uhlig <matzeton@googlemail.com> | 2018-12-24 11:59:52 +0100 |
| commit | 021b6847054cec55303efeec22a179397ce88165 (patch) | |
| tree | f52e1e7683e8e161c3e03486a472f5436b080a64 /src/ptunnel.c | |
| parent | d1c216b79080ac6092c362504bcc44f5d4b929c4 (diff) | |
introduced icmp_filter for forward socket to filter out unwanted icmp messages via setsockopt
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Diffstat (limited to 'src/ptunnel.c')
| -rw-r--r-- | src/ptunnel.c | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/src/ptunnel.c b/src/ptunnel.c index af164c5..f640d1b 100644 --- a/src/ptunnel.c +++ b/src/ptunnel.c @@ -62,7 +62,7 @@ #define errno GetLastError() /** Local error string storage */ static char errorstr[255]; -static char * print_last_windows_error() { +static char * print_last_windows_error() { char last_errorstr[255]; DWORD last_error = GetLastError(); @@ -388,6 +388,7 @@ void* pt_proxy(void *args) { in_addr_t *adr; #endif struct in_addr in_addr; + struct icmp_filter filt; /* Start the thread, initialize protocol and ring states. */ pt_log(kLog_debug, "Starting ping proxy..\n"); @@ -410,6 +411,9 @@ void* pt_proxy(void *args) { else { pt_log(kLog_debug, "Attempting to create privileged ICMP raw socket..\n"); fwd_sock = socket(AF_INET, SOCK_RAW, IPPROTO_ICMP); + filt.data = ~((1<<ICMP_ECHO) | (1<<ICMP_ECHOREPLY)); + if (setsockopt(fwd_sock, SOL_RAW, ICMP_FILTER, &filt, sizeof filt) == -1) + pt_log(kLog_error, "setockopt for ICMP_FILTER: %s\n", strerror(errno)); } if (fwd_sock < 0) { pt_log(kLog_error, "Couldn't create %s socket: %s\n", |