I may be the only evil (bit) user on the internet (2015)(blog.benjojo.co.uk)

   iptables -A OUTPUT -p tcp -d 185.230.223.37 -j NFQUEUE --queue-num 1

   from scapy.all import IP, TCP
   from netfilterqueue import NetfilterQueue
   
   # Callback function for handling packets in the NFQUEUE
   def packet_callback(packet):
       pkt = IP(packet.get_payload())
       # Modify only outgoing TCP packets to the target IP
       if pkt.haslayer(TCP) and pkt[TCP].dport == 3560  and pkt[TCP].dport == 3561:
           # Set the reserved bit to 1
           # 6 ist DN und evil
           # 2 ist DN
           # 4 is evil
           pkt.flags |= 4
           del pkt[IP].chksum
           del pkt[TCP].chksum
           pkt.show2()
           pkt.show()
   
   
           # Print a message indicating packet modification
           print("Modified packet:", pkt.summary())
   
           # Update the packet payload
           packet.set_payload(bytes(pkt))
   
       # Accept the modified packet
       packet.accept()
   
   # Set up the NFQUEUE handler
   nfqueue = NetfilterQueue()
   nfqueue.bind(1, packet_callback)
   
   try:
       # Run the main loop
       nfqueue.run()
   except KeyboardInterrupt:
       # Cleanup on keyboard interrupt
       nfqueue.unbind()

    Some organizations are prohibited from using this mood by mission
    statement.  This would also prohibit using the security flag in the
    IP header described in [RFC3514] for the same reasons.