From owner-freebsd-ipfw Wed Nov 24 3:54:52 1999 Delivered-To: freebsd-ipfw@freebsd.org Received: from www.ifrance.com (www.ifrance.com [209.67.249.134]) by hub.freebsd.org (Postfix) with SMTP id F3F8A15120 for ; Wed, 24 Nov 1999 03:54:45 -0800 (PST) (envelope-from brunoc@ifrance.com) Received: from 212.124.1.84 [212.124.1.84] by www.ifrance.com; Wed, 24 Nov 1999 11:45:33 GMT Message-ID: <003201bf3673$23b24d90$1ec809c0@motte.alpes-net.fr> From: "Christian Bruno" To: Subject: firewall punching disabled in natd/libalias ? Date: Wed, 24 Nov 1999 12:57:51 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.3155.0 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3155.0 Sender: owner-freebsd-ipfw@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG hello, i'm adding a functionality (H323) in libalias(FreeBSD 3.0 Release), and i need to use "Firewall Punching". As far as i know, i just have to call fwpunchhole( ) to add dynamically (and temporary) a rule to the firewall rule list ( it will be a rule like : allow tcp from sourceip to destip #portnumer SETUP ) My problem is that all the code involved in fw punch seems to be "de-activated". A call to SetPacketAliasMode() (from natd.c) can activate this function but it seems there is no command line option in NATD to do so. i need to modify natd.c and add a new option ? will this code (fwpunchhole) be removed from the freebsd natd ? any help greatly appreciated ! Regards, Christian brunoc@ifrance.com ps : as i'm new to freebsd mailing lists, please reply to my email if this message is posted in the wrong list ______________________________________________________________________ Message envoye depuis iFrance >> http://www.ifrance.com Gratuit >> Hebergement (50 Mo)/Vos emails (POP&HTML,20 Mo) Votre agenda online gratuit >> http://agenda.ifrance.com NOUVEAU : Faxez gratuitement ! >> http://fax.ifrance.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message