Date: Fri, 19 Jul 1996 10:53:54 -0700 (PDT) From: "JULIAN Elischer" <julian@ref.tfs.com> To: avalon@coombs.anu.edu.au (Darren Reed) Cc: noel@harleystreet.com, freebsd-hackers@freebsd.org Subject: Re: IP masquerading over tunel device Message-ID: <199607191753.KAA26403@ref.tfs.com> In-Reply-To: <199607191722.KAA09210@freefall.freebsd.org> from "Darren Reed" at Jul 20, 96 03:22:25 am
next in thread | previous in thread | raw e-mail | index | archive | help
darren, your web page seems to point to a non existantfile (or so netscape says.. ftp://coombs.anu.edu.au/pub/net/kernel/ip-fil3.1.0.tar.gz retunrs an error) I'm surprised that I haven't heard more about this.. oh well. so this is a kernel module(!?) I thought it was a user process so now we have two conflicting competing kernel ip filters.. (aint competition great?) is this the original ip filtering package someone submitted back in the old 386BSD days? julian > > > > In some mail from Noel Burton-Krahn, sie said: > > > > I'm not sure what you mean by the "NAT implementation" in ipfilter. = > > from the docs, I see that ipfilter can detect packets that would need to = > > be edited in an IP masquerading sense, but can ipfilter remove those = > > packets from the IP code in the kernel and re-insert edited packets? > > "re-insert" ? > > It just changes them on their way through. > > However, NAT wasn't `officially' part of IP Fitler until about 2 weeks ago, > although it was present, when 3.1.0 was released (also made the transparent > proxy stuff `official'). > > Have another look at the web pages, in particular this one: > > http://coombs.anu.edu.au/~avalon/ipfil-flow.html > > which shows how the various stages interact in how packets are passed > through. > > Darren >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199607191753.KAA26403>