LinuxSA Mailing list archives

  From: Richard Sharpe <sharpe@ns.aus.com>
  To  : LinuxSA@linuxsa.org.au
  Date: Thu, 24 Feb 2000 14:36:02 +1000

NAT and Masquerading and Linux 2.0.36 and IPCHAINS

Hi,

I am interested in hearing of any known vulnerabilities with the Linux
Static NAT code (not MASQ), esp when used in conjunction with MASQ code on
a 2.0.36 kernel.

I have had to use a complex setup where an external IPCHAINS gateway is
letting packets into an internal gateway for port 80.  The internal gateway
then NATs them to a private internal address. It uses IPFWADM, and it all
works, but has been removed pending a security review.



Regards
-------
Richard Sharpe, sharpe@ns.aus.com, Master Linux Administrator :-),
Samba (Team member, www.samba.org), Ethereal (Team member, www.zing.org)
Co-author, SAMS Teach Yourself Samba in 24 Hours
Author: First Australian 5-day, intensive, hands-on Linux SysAdmin course
Author: First Australian 2-day, intensive, hands-on Samba course

-- 
LinuxSA WWW: http://www.linuxsa.org.au/  IRC: #linuxsa on irc.linux.org.au
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject