Messages in this thread | | | From | Paul Rusty Russell <> | Subject | Re: further problems in the linux firewall | Date | Fri, 10 Jul 1998 09:22:02 +0930 |
| |
In message <19980709104739.B8963@cybercomm.net> you write: > > Continuing with the further adventures of No Root Daemon Man and the > Evil ipfwadm udp bug: > > > to recap: transparent proxying is broken for udp in kernel 2.0.34(but works > for tcp). with a rule like the following: > > ipfwadm -I -P -i accept -r 1153 -S 127.0.0.1/32 -D 127.0.0.1/32 53 > > info coming from the daemon sitting on port 1153 ( named) is seen by the > net app (ftp, telenet etc) making a dns request to port 53 as coming from > port 1153 rather than 53 as would be expected.these net apps ( aside from > nslookup) don't like this at all and cannot receive the dns info from the > 1153 port.
And this surprises you *why* exactly? You really want NAT going the other way, which we don't have. I don't think even ipportfw will help you here.
Rusty. -- .sig lost in the mail.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu
| |