Re: libalias/natd and identd support

From: Ruslan Ermilov (ru_at_freebsd.org)
Date: 07/24/03

  • Next message: Brett Glass: "Re: NAT and PPTP" 
    Date: Thu, 24 Jul 2003 08:16:46 +0300
To: Krzysztof Drewicz <hunter24@pancake.sggw.waw.pl>

    On Thu, Jul 24, 2003 at 02:39:08AM +0200, Krzysztof Drewicz wrote:
    > Right now when natd'ing boxes one have to supply a random (fake) ident
    > respone, or simply RST on tcp/135. Libalias&natd could provide simple way
    > to ask 'what is real src ip/port' by knowing outgoin port and IP combination.
    >
    > I've written small patch for that. Natd binds additonal AF_UNIX/DGRAM
    > socket, and asks libalias about connections.
    >
    > They can be fetched from here: http://pancake.sggw.waw.pl/~hunter24/libalias/
    >
    > Maybe someone could help me w/ integrating 'client.c'
    > into oidentd/src/freebsd.c file or merge it with current development tree ?
    >
    > /usr/src/lib/libalias # cvs diff -u -N -d alias.h alias_db.c | wc -l
    > 157
    > /usr/src/sbin/natd # cvs diff -u -b -N -d . | wc -l
    > 317
    > /usr/src/sbin/natd # wc -l client.c ident.c
    > 89 client.c
    > 48 ident.c
    > 137 total
    >
    Last time I looked into it a few years ago, it turned out that we lack
    some info (sorry, I don't remember the details) to answer IDENT queries
    correctly. But since you have a patch, perhaps you have solved this
    problem. Please file a PR for that; I will look into it when I get to
    libalias/natd PRs.

    Cheers, 

    -- 
Ruslan Ermilov		Sysadmin and DBA,
ru@sunbay.com		Sunbay Software Ltd,
ru@FreeBSD.org		FreeBSD committer

  • Next message: Brett Glass: "Re: NAT and PPTP"