Messages in this thread | | | Date | Wed, 21 Oct 1998 23:50:37 +0300 (EEST) | From | Meelis Roos <> | Subject | Re: Dynamic IP hack (PR#294) |
| |
> > IP masq != firewall in a strict sense. > > True, but as the same software's used to control both under Linux 2.0 > kernels, there's not a great deal to differentiate them from a > practical point of view...
No, I meant firewalls generally, not the linux ip firealling.
> There's one other I've come across, namely net2phone. However, whilst > they're not directly supporting masquerading, they have programmed a > work-around to deal with it - net2phone can be set up to use specific > port numbers, rather than the standard "random free port" system now, > since I've notified them of the problem...
As can be ICQ, but ipautofw is IMHO too bad for redirecting a range of ports - the rest of the kernel doesn't know that the ports have been reserved and uses the same ports as the source port for outgoing connections. As the result, outgoing connection time out sometimes, and even 10 failures in a row was oo much for me.
--- Meelis Roos (mroos@tartu.cyber.ee)
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |