OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
NFR Wizards Archive: Re: IP transparent proxies (source).

Re: IP transparent proxies (source).


-= ArkanoiD =- (arkmpak.convey.ru)
Wed, 5 Nov 97 02:07:55 +0300


nuqneH,

> Date: Tue, 4 Nov 1997 12:56:57 -0500
> From: Steve Kann <stevekSteveK.COM>
> To: linux-netvger.rutgers.edu
> Cc: firewall-wizardsnfr.net
> Subject: IP transparent proxies (source).

[dd]

> I've been really interested in IP_TRANSPARENT_PROXY stuff, and
> have made two tools that are really useful for taking advantage of it.
> The first is tplug-gw, which is based on the fwtk plug-gw, and can
> transparently proxy tcp connections. You can then choose via linux'
> filtering rules which connections you'd like proxied. Doing this,
> instead of simple packet filtering lets you have better logging, stops
> TCP OOB attacks, fragmentation attacks, etc. I'm not including the
> source here yet, because I'm not sure if I'm allowed to redistribute it,
> according to the fwtk license. I might just re-write it from scratch,
> as it isn't too complicated, and then it could be released without
> problems.

Hmm afair such a thing already does exist (it was a transparent patch
set for fwtk,works with xBSD ipfilter and linux masquerading).

afair there was ftp-gw patch also.
---
                                       _ _ _ _ _ _ _
   Must be a visit from the dead.. _| o |_ | | _|| | / _||_| |_ |_ |_
   CU in Hell .......... Arkan#iD |_ o _||_| _||_| / _| | o |_||_||_|



This archive was generated by hypermail 2.0b3 on Sat Jul 17 1999 - 07:09:48 CDT