Re: Using linux as a state firewall (masq as 1:1 whithout address translation)

From: Sven Koch (haegar@comunit.net)
Date: Thu Oct 19 2000 - 07:54:47 EST


On Thu, 19 Oct 2000 Daniel.Ryde@mimer.se wrote:

> Is it possible to use Linux as a state firewall, like masq but without
> address translation?

It's possible with the upcoming kernel 2.4, but as far as I know not with
2.2.x.

in 2.4 there is a new firewalling-environment called netfilter - have a
look at http://netfilter.kernelnotes.org/

> What I mean is that I want it to work like an ordinar router without
> address translation, but block all packets from the outside that has
> not been initiated from the inside and also handle the special
> cases like FTP that masq does.
>
> Possible? How?

c'ya
sven

-- 

The Internet treats censorship as a routing problem, and routes around it. (John Gilmore on http://www.cygnus.com/~gnu/)

- To unsubscribe from this list: send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org



This archive was generated by hypermail 2b29 : Mon Oct 23 2000 - 21:00:24 EST