Re: TCP intercept?

2001-04-22 Thread Julian Elischer
"E.B. Dreger" wrote: > > Greetings all, > > I'm no kernel hacker, and trying to think of useful little projects to > change that. ;-) > > AFAIK, FreeBSD lacks support for TCP intercept. Is anyone already working > on this? Would it be of interest to anyone? My initial thoughts are that > it

Re: TCP intercept?

2001-04-22 Thread Alex Pilosov
In cisco terminology, 'tcp intercept' is what the 'ip and tcp reassembly' part of ipnat does (without port/address rewriting). For example, a router in the middle which is doing the intercept will have to buffer/reassemble tcp stream and only forward packets after they are confirmed good. Example

Re: TCP intercept?

2001-04-22 Thread Andrew R. Reiter
What's TCP intercept? On Mon, 23 Apr 2001, E.B. Dreger wrote: > Greetings all, > > I'm no kernel hacker, and trying to think of useful little projects to > change that. ;-) > > AFAIK, FreeBSD lacks support for TCP intercept. Is anyone already working > on this? Would it be of interest to an

TCP intercept?

2001-04-22 Thread E.B. Dreger
Greetings all, I'm no kernel hacker, and trying to think of useful little projects to change that. ;-) AFAIK, FreeBSD lacks support for TCP intercept. Is anyone already working on this? Would it be of interest to anyone? My initial thoughts are that it should be implemented in the same neighb

Making getsockname return sensible data for unbound AF_UNIX sockets

2001-04-22 Thread Thomas Moestl
Hello, I would like to commit a really small patch that makes getsockname fill the sockaddr for non-bound PF_LOCAL sockets with sun_noname, instead of just setting the length parameter to 0 and return (without an error) like it does now. PF_INET and PF_INET6 sockets, for example, behave like this

Re: NAT implementation help.

2001-04-22 Thread Alexander Langer
Thus spake Jet Liang ([EMAIL PROTECTED]): > Hi, I am going to implement NAT for a network > device. Can anyone tell me when can I find > out some implementation document? $(man natd) and the FreeBSD Handbook Alex -- cat: /home/alex/.sig: No such file or directory To Unsubscribe: send mail to

Re: KAME SPD bug, please try and confirm ...

2001-04-22 Thread Gunther Schadow
[EMAIL PROTECTED] wrote: > sorry that we did not make any useful responses, some of the kame guys > (mainly sakane) are trying to repeat the symptom. I appreciate that very much! > i ran a small test with slightly different setup on both NetBSD > 1.5.1_BETA and N

NAT implementation help.

2001-04-22 Thread Jet Liang
Hi, I am going to implement NAT for a network device. Can anyone tell me when can I find out some implementation document? Thanks! Fuzi _ Get your FREE download of MSN Explorer at http://explorer.msn.com To Unsubscribe: send mail

Re: KAME SPD bug, please try and confirm ...

2001-04-22 Thread itojun
>[Sorry I resend this because it seems as if my subject line >was turning everyone off from looking at this.] >Below is what could be a cookbook recipe for IPsec tunnels. However, >unfortunately it's a bug report. I would like some of you to try >this out and confirm the problem for me, may be fi