lkml.org 
[lkml]   [1998]   [Jul]   [9]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: further problems in the linux firewall
Date
In message <19980709104739.B8963@cybercomm.net> you write:
>
> Continuing with the further adventures of No Root Daemon Man and the
> Evil ipfwadm udp bug:
>
>
> to recap: transparent proxying is broken for udp in kernel 2.0.34(but works
> for tcp). with a rule like the following:
>
> ipfwadm -I -P -i accept -r 1153 -S 127.0.0.1/32 -D 127.0.0.1/32 53
>
> info coming from the daemon sitting on port 1153 ( named) is seen by the
> net app (ftp, telenet etc) making a dns request to port 53 as coming from
> port 1153 rather than 53 as would be expected.these net apps ( aside from
> nslookup) don't like this at all and cannot receive the dns info from the
> 1153 port.

And this surprises you *why* exactly? You really want NAT going the
other way, which we don't have. I don't think even ipportfw will help
you here.

Rusty.
--
.sig lost in the mail.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu

\
 
 \ /
  Last update: 2005-03-22 13:43    [W:0.050 / U:0.472 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site