From owner-freebsd-security  Mon Feb 11 18:35:45 2002
Delivered-To: freebsd-security@freebsd.org
Received: from newman2.bestweb.net (newman2.bestweb.net [209.94.102.67])
	by hub.freebsd.org (Postfix) with ESMTP id 4C63637B500
	for <security@FreeBSD.ORG>; Mon, 11 Feb 2002 18:18:44 -0800 (PST)
Received: from okeeffe.bestweb.net (okeefe.bestweb.net [209.94.100.110])
	by newman2.bestweb.net (Postfix) with ESMTP
	id 9136A231A6; Mon, 11 Feb 2002 21:17:50 -0500 (EST)
Received: by okeeffe.bestweb.net (Postfix, from userid 0)
	id B1BC29F37B; Mon, 11 Feb 2002 21:12:33 -0500 (EST)
Date: Sat, 09 Feb 2002 15:01:22 -0700
To: Andrew Kenneth Milton <akm@theinternet.com.au>, 
From: Brett Glass <brett@lariat.org>
Subject: Re: Is the technique described in this article do-able with
Cc: Darren Reed <avalon@coombs.anu.edu.au>, security@FreeBSD.ORG
Message-Id: <20020212021233.B1BC29F37B@okeeffe.bestweb.net>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

At 02:03 AM 2/9/2002, Andrew Kenneth Milton wrote:

>Even if it were in a comatose state, you might have some problems with 
>using natd since your userland is gone. 

You could use ipf, which (IIRC) does NAT in the kernel.

--Brett


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message