Re: What's the progress of in-kernel proxy for pf NAT?
"Karl O. Pinc" <[email protected]>
| Newsgroups | gmane.os.openbsd.misc,gmane.os.openbsd.pf |
|---|---|
| Message-ID | <1248365670l.24123l.0l@mofo> |
On 07/23/2009 05:52:38 AM, Henning Brauer wrote: > * hu st <[email protected]> [2009-07-23 12:35]: > > AFAIK pf has only a ftp-proxy anchor. > > it has userland helpers for the most relevant protocols. Is there a list of these anywhere? ftp-proxy is the only one that comes to mind, of those where the protocol is stupid and utilizes multiple connections/ports. Other proxies, as for http, can be implemented entirely in userspace. I'm not sure but I believe that SIP is also bad this way. Is there a SIP proxy? Are there other "bad" protocols that require things like anchor updates? Karl <[email protected]> Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein