I am doing a security research related to the damage you can do if you control the router. I need to be able to close/reset a established connection from one client while sitting on the router.
To be more specific, I need to kill the connection between a client and the Apple Push notification server (APNS). The reason is that I want to be able to prevent the client from communicating with APNS. I tried using iptables but it won't work on established connections.
Given that there is a established connection to APNS from the moment the client turns on his Macbook, by the time I compromise the router it's to late.
I tried iptables, to change the arp table, used the "route" and "ip route" commands. Nothing worked...
How can I kill a established connection when I control the router so I can add rules to iptables that prevent a new connection?
I will add that I do not want to install new tools like tcpkill or cutter. I would like to find a way to do this with the tools that come in the OS out of the box on distros like dd-wrt and openwrt.