libalias/natd and identd support

Ruslan Ermilov ru at freebsd.org
Wed Jul 23 22:16:57 PDT 2003


On Thu, Jul 24, 2003 at 02:39:08AM +0200, Krzysztof Drewicz wrote:
> Right now when natd'ing boxes one have to supply a random (fake) ident 
> respone, or simply RST on tcp/135. Libalias&natd could provide simple way
> to ask 'what is real src ip/port' by knowing outgoin port and IP combination.
> 
> I've written small patch for that. Natd binds additonal AF_UNIX/DGRAM 
> socket, and asks libalias about connections.
> 
> They can be fetched from here: http://pancake.sggw.waw.pl/~hunter24/libalias/
> 
> Maybe someone could help me w/ integrating 'client.c'
>  into oidentd/src/freebsd.c file or merge it with current development tree ?
> 
> /usr/src/lib/libalias # cvs diff -u -N -d alias.h alias_db.c  | wc -l
> 157
> /usr/src/sbin/natd # cvs diff -u -b -N -d . | wc -l
> 317
> /usr/src/sbin/natd # wc -l client.c ident.c
>       89 client.c
>       48 ident.c
>      137 total
> 
Last time I looked into it a few years ago, it turned out that we lack
some info (sorry, I don't remember the details) to answer IDENT queries
correctly.  But since you have a patch, perhaps you have solved this
problem.  Please file a PR for that; I will look into it when I get to
libalias/natd PRs.


Cheers,
-- 
Ruslan Ermilov		Sysadmin and DBA,
ru at sunbay.com		Sunbay Software Ltd,
ru at FreeBSD.org		FreeBSD committer
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-net/attachments/20030724/ece4c24f/attachment.bin


More information about the freebsd-net mailing list