libalias/natd and identd support
Ruslan Ermilov
ru at freebsd.org
Wed Jul 23 22:16:57 PDT 2003
On Thu, Jul 24, 2003 at 02:39:08AM +0200, Krzysztof Drewicz wrote:
> Right now when natd'ing boxes one have to supply a random (fake) ident
> respone, or simply RST on tcp/135. Libalias&natd could provide simple way
> to ask 'what is real src ip/port' by knowing outgoin port and IP combination.
>
> I've written small patch for that. Natd binds additonal AF_UNIX/DGRAM
> socket, and asks libalias about connections.
>
> They can be fetched from here: http://pancake.sggw.waw.pl/~hunter24/libalias/
>
> Maybe someone could help me w/ integrating 'client.c'
> into oidentd/src/freebsd.c file or merge it with current development tree ?
>
> /usr/src/lib/libalias # cvs diff -u -N -d alias.h alias_db.c | wc -l
> 157
> /usr/src/sbin/natd # cvs diff -u -b -N -d . | wc -l
> 317
> /usr/src/sbin/natd # wc -l client.c ident.c
> 89 client.c
> 48 ident.c
> 137 total
>
Last time I looked into it a few years ago, it turned out that we lack
some info (sorry, I don't remember the details) to answer IDENT queries
correctly. But since you have a patch, perhaps you have solved this
problem. Please file a PR for that; I will look into it when I get to
libalias/natd PRs.
Cheers,
--
Ruslan Ermilov Sysadmin and DBA,
ru at sunbay.com Sunbay Software Ltd,
ru at FreeBSD.org FreeBSD committer
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-net/attachments/20030724/ece4c24f/attachment.bin
More information about the freebsd-net
mailing list