Re: update pf

To: tech-net%netbsd.org@localhost
Subject: Re: update pf
From: christos%astron.com@localhost (Christos Zoulas)
Date: Sat, 10 Dec 2016 05:52:25 +0000 (UTC)

In article <28ffe0cb-df5d-d5ce-f2ad-eada4c07a14e%egervary.hu@localhost>,
EgervÃ¡ry Gergely  <gergely%egervary.hu@localhost> wrote:
>>> NPF is missing TPROXY / divert sockets functionality.
>>
>> Can't you use map for those?
>
>Squid transparent/intercept proxy needs to know the original
>destination address. With map (DNAT) it's only possible doing
>an IOCTL lookup on the NAT table.
>
>   IPFilter: SIOCGNATL
>   PF: DIOCNATLOOK
>
>Unfortunately, it's not implemented in NPF yet.

I just implemented it; see the identd source on how to use it.

christos

Follow-Ups:
- Re: update pf
  - From: Egerváry Gergely

References:
- update pf
  - From: Egerváry Gergely
- Re: update pf
  - From: Egerváry Gergely
- Re: update pf
  - From: Christos Zoulas
- Re: update pf
  - From: Egerváry Gergely

Prev by Date: Re: Howto use agr to aggregate VPN tunnels
Next by Date: Re: update pf
Previous by Thread: Re: update pf
Next by Thread: Re: update pf
Indexes:

Home | Main Index | Thread Index | Old Index