In cisco terminology, 'tcp intercept' is what the 'ip and tcp reassembly'
part of ipnat does (without port/address rewriting). For example, a router
in the middle which is doing the intercept will have to buffer/reassemble
tcp stream and only forward packets after they are confirmed good.
Example: packets with a wrong sequence number will be bounced at the
router. On ciscos, tcp-intercept can also rate-limit syn packets...
I'm not sure if it can be enabled in ipnat separately, but hell, if
someone wants to do it...
On Sun, 22 Apr 2001, Andrew R. Reiter wrote:
>
> What's TCP intercept?
>
> On Mon, 23 Apr 2001, E.B. Dreger wrote:
>
> > Greetings all,
> >
> > I'm no kernel hacker, and trying to think of useful little projects to
> > change that. ;-)
> >
> > AFAIK, FreeBSD lacks support for TCP intercept. Is anyone already working
> > on this? Would it be of interest to anyone? My initial thoughts are that
> > it should be implemented in the same neighborhood as stateful firewall
> > code, as the two are rather closely related.
> >
> >
> > Eddy
> >
> > ---------------------------------------------------------------------------
> >
> > Brotsman & Dreger, Inc.
> > EverQuick Internet / EternalCommerce Division
> >
> > Phone: (316) 794-8922
> >
> > ---------------------------------------------------------------------------
> >
> >
> > To Unsubscribe: send mail to [EMAIL PROTECTED]
> > with "unsubscribe freebsd-hackers" in the body of the message
> >
>
> *-------------.................................................
> | Andrew R. Reiter
> | [EMAIL PROTECTED]
> | "It requires a very unusual mind
> | to undertake the analysis of the obvious" -- A.N. Whitehead
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-net" in the body of the message
>
>
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message
