Re: IP stack - ip translation

Tech-Archive recommends: Fix windows errors by optimizing your registry



For the entire system this would require a Network Helper Layer, which are
damned nasty, used in spyware a lot - and wiped out by most spyware tools if
they arnt signed by MS or trusted authority.

The host you can do by modifiying your hosts table
(c:/windows/system32/drivers/etc/hosts), as for replacing the Winsock DLL,
Windows would probably try to execute it for being an unsigned core
component.

Explain what you are trying to do, is it for an entire system etc? or just a
single app, by the looks of it you want an entire app and are trying to make
some proxying device.

--
- Mark Randall
http://zetech.swehli.com

"Lisa Pearlson" <no@xxxxxxxx> wrote in message
news:%23Xp5D7WcFHA.4040@xxxxxxxxxxxxxxxxxxxxxxx
> Hi,
>
> I'd like to accomplish this (pseudo code):
>
> if ( domain = host1.domain1.com || ip = w.x.y.z )
> {
> domain = host2.domain2.com;
> ip = dnslookup ( domain );
> }
>
> On the tcp stack, effectively transparently replacing one ip by another.
> This requires some low level access to tcp packets so data fields can be
> manipulated, like firewalls, proxies, nats and pats do. It can be easily
> accomplished with iptables on linux platform.
>
> But how could I implement such thing? Many years ago, I remembered that on
> the pc you could REPLACE the standard winsock.dll with a proxy stub that
> takes the place of winsock, and passes everything on to the original
> winsock.dll, but sitting in the middle and manipulating winsock calls as
> they come by. But desktop pc firewalls are implemented differently I
> think.
>
> Can this be accomplished on the application level (with winsock api's or
> something), or does it have to happen on the driver level, or what? I have
> no clue about how to manipulate IP packets.. on what level that is and how
> to get access to it.
>
> Any hints and pointers are very welcome
>
>


.



Relevant Pages

  • IP stack - ip translation
    ... I'd like to accomplish this: ... On the tcp stack, effectively transparently replacing one ip by another. ... winsock.dll, but sitting in the middle and manipulating winsock calls as ...
    (microsoft.public.vc.mfc)
  • Re: MSN Sites
    ... Dealing with Unwanted Spyware and Parasites: ... Winsock Fix Utility ... Download Sysclean.com, from Trend Micro, here: ... Please reply to the newsgroup so others may benefit. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Internet Explorer Hang
    ... from internet except updates and do not ever click on adds. ... Windows XP w/SP2 installed from factory. ... Probably why my Spyware checks find nothing. ... Removing some spyware can damage the Winsock stact. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: IE 6.0 opens by itself
    ... Dealing with Unwanted Spyware and Parasites: ... Winsock Fix Utility ... Download Sysclean.com, from Trend Micro, here: ... Please reply to the newsgroup so others may benefit. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Internet Explorer has encountered a problem...every single time
    ... Dealing with Unwanted Spyware and Parasites: ... Winsock Fix Utility ... Download Sysclean.com, from Trend Micro, here: ... Please reply to the newsgroup so others may benefit. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)