From owner-freebsd-questions@FreeBSD.ORG Fri Feb 10 15:27:20 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id AE49116A420 for ; Fri, 10 Feb 2006 15:27:20 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from pi.codefab.com (pi.codefab.com [199.103.21.227]) by mx1.FreeBSD.org (Postfix) with ESMTP id EDDA943D53 for ; Fri, 10 Feb 2006 15:27:19 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from localhost (localhost [127.0.0.1]) by pi.codefab.com (Postfix) with ESMTP id 45A205CA3; Fri, 10 Feb 2006 10:27:19 -0500 (EST) Received: from pi.codefab.com ([127.0.0.1]) by localhost (pi.codefab.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 14957-08; Fri, 10 Feb 2006 10:27:18 -0500 (EST) Received: from [192.168.1.3] (pool-68-160-209-142.ny325.east.verizon.net [68.160.209.142]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by pi.codefab.com (Postfix) with ESMTP id 1C2255C50; Fri, 10 Feb 2006 10:27:18 -0500 (EST) Message-ID: <43ECB0DD.1010202@mac.com> Date: Fri, 10 Feb 2006 10:27:25 -0500 From: Chuck Swiger Organization: The Courts of Chaos User-Agent: Thunderbird 1.5 (Windows/20051201) MIME-Version: 1.0 To: Wojciech Puchar References: <20060210114512.A25713@chylonia.3miasto.net> In-Reply-To: <20060210114512.A25713@chylonia.3miasto.net> X-Enigmail-Version: 0.94.0.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at codefab.com Cc: freebsd-questions@freebsd.org Subject: Re: natd & auth requests X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Feb 2006 15:27:20 -0000 Wojciech Puchar wrote: > how can i make ident service to make informative answers for connections > handled by natd? like answering last byte of source IP number or DNS > reverse name or maybe from table like oidentd? If you're using 1-to-1 NAT forwarding, run identd or the inetd-based version on the internal hosts you're forwarding to. If you're using NAT to only forward individual ports to specific machines, or are using NAT for outbound connection sharing only, well, you can only forward ident requests to a single machine; I don't know of a better solution. Interesting problem... -- -Chuck