From owner-freebsd-security  Sat Feb  9 14: 2:17 2002
Delivered-To: freebsd-security@freebsd.org
Received: from lariat.org (lariat.org [12.23.109.2])
	by hub.freebsd.org (Postfix) with ESMTP id CB88637B405
	for <security@FreeBSD.ORG>; Sat,  9 Feb 2002 14:02:14 -0800 (PST)
Received: from mustang.lariat.org (IDENT:ppp0.lariat.org@lariat.org [12.23.109.2])
	by lariat.org (8.9.3/8.9.3) with ESMTP id PAA15678;
	Sat, 9 Feb 2002 15:01:29 -0700 (MST)
Message-Id: <4.3.2.7.2.20020209150043.00dd56a0@localhost>
X-Sender: brett@localhost
X-Mailer: QUALCOMM Windows Eudora Version 4.3.2
Date: Sat, 09 Feb 2002 15:01:22 -0700
To: Andrew Kenneth Milton <akm@theinternet.com.au>,
	"f.johan.beisser" <jan@caustic.org>
From: Brett Glass <brett@lariat.org>
Subject: Re: Is the technique described in this article do-able with
Cc: Darren Reed <avalon@coombs.anu.edu.au>, security@FreeBSD.ORG
In-Reply-To: <20020209190334.I32999@zeus.theinternet.com.au>
References: <20020208234001.R21734-100000@localhost>
 <200202090620.RAA19299@caligula.anu.edu.au>
 <20020208234001.R21734-100000@localhost>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

At 02:03 AM 2/9/2002, Andrew Kenneth Milton wrote:

>Even if it were in a comatose state, you might have some problems with 
>using natd since your userland is gone. 

You could use ipf, which (IIRC) does NAT in the kernel.

--Brett


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message