Re: Dynamic source MAC-NAT?

Bart De Schuymer wrote:
> The problem with dynamic macnat is that the kernel sk_buff structure
> will have to be altered, which is something the network maintainers
> don't like. Apart from that there should be no big problems implementing
> it.

Why is the modification neccessary? As I understand it you only need to
keep a hash of tracked "connections" and mangle the *skb->data when the
packet hits. Am I missing something?

> I currently lack the time for any serious development, though.

I have briefly looked at DHCP (RFC2131) so far, as I was worried that
MAC NAT would break it, and it seems viable, there are two fields in the
packet that make it possible to identify the "connection".

Feyd



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click